I'm trying to get the OpenId Connect working in Ilias. I use a test account at Auth0 for this purpose.
I have set all the required fields in Ilias that Auth0 has given me. I also set the trusted callbacu url in Auth0, ie: https://<mydomain>.nl/openidconnect.php
I set the attribute to email.
The moment I click on the OpenId authentication link, Auth0 opens, I fill in my username and password and it redirects to Ilias but then it shows an errormessage, see screenshot. It says incorrectly logged in.
To research what goes on in the background I set logging to DEBUG:
[p84d9] [2020-01-17 16:27:03.472134] 0000-546_auth.DEBUG: ilAuthSession::init:1115 Started new session.
[p84d9] [2020-01-17 16:27:03.472355] 0000-546_init.DEBUG: ilInitialisation::resumeUserSession:1080 Current session is invalid: p84d9elm84n98gcjqe3811vs50
[p84d9] [2020-01-17 16:27:03.472413] 0000-546_init.DEBUG: ilInitialisation::blockedAuthentication:1303 Blocked authentication for shibboleth request.
[p84d9] [2020-01-17 16:27:03.472442] 0000-546_init.DEBUG: ilInitialisation::resumeUserSession:1080 Authentication is started in current script.
[p84d9] [2020-01-17 16:27:03.516731] 0000-546_init.DEBUG: ilUserRequestTargetAdjustment::adjust:1650 Anyonymous request. No adjustment.
[p84d9] [2020-01-17 16:27:03.584468] 0000-546_init.DEBUG: ilStartUpGUI::doOpenIdConnectAuthentication:106 Trying openid connect authentication
[p84d9] [2020-01-17 16:27:03.622635] 0000-546_auth.DEBUG: ilAuthFrontendCredentials::setUsername:43 Username: ""
[p84d9] [2020-01-17 16:27:03.623939] 0000-546_auth.DEBUG: ilAuthProviderFactory::getProviderByAuthMode:2407 Using openid connect authentication.
[p84d9] [2020-01-17 16:27:03.627422] 0000-546_auth.DEBUG: ilAuthFrontendFactory::getFrontend:2417 Init auth frontend with standard auth context
[p84d9] [2020-01-17 16:27:03.630032] 0000-546_auth.DEBUG: ilAuthFrontend::authenticate:2422 Trying authentication against: ilAuthProviderOpenIdConnect
[p84d9] [2020-01-17 16:27:03.637668] 0000-546_auth.DEBUG: ilAuthProviderOpenIdConnect::doAuthentication:182 Redirect url is: https://<mydomain>/openidconnect.php
[p84d9] [2020-01-17 16:27:03.903436] 0000-546_auth.DEBUG: ilLogger::dump:98 Array
(
[id_token] => eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik5FVkZSVGd5T0RBMU56TkVOakZEUWtVMlJqTkdRalJFTnpsQk5FSTJSRGM0TWpKQk5FWXdRZyJ9.eyJuaWNrbmFtZSI6InIuZGVrb3N0ZXIiLCJuYW1lIjoici5kZWtvc3RlckBub29yZGhvZmYubmwiLCJwaWN0dXJlIjoiaHR0cHM6Ly9zLmdyYXZhdGFyLmNvbS9hdmF0YXIvMWZjZDVkZjczMTRiMjk5ZGE2OWNkNmI4NzlmZmUzOWI_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.DIDIjWxn_WpafSc26YB7fgIgnVEs-kILCPAJ_4_RO6t_-_QVshLqB-ny3BGMfkGDtRqyoJUj9Xk0Qb3l5t45kYnmXxQYeB3EDirh4gCIyD5diAVVzq6ji5HriRToKqpqF7uGsfct9nvGD87xPe6EzI_xqtqaamKwQduAQuKXyPFJ7UWqza9J-h50EUUR-uq6UqA8hwsbidAy0omGX12lFKU-tzm9h_CS4MVCgfT3BhgOpxJmNQX3E1JB6Z_6_tfmXJBjAwBCxutzOukeweS1xTHdFM1Z3oMC8IYFV6GkhWeDZUh2PqhZpwSQHvQWk7-QSnJltWpVZeSxis-Rfnarsg
[state] => da5c91fcdbaab0bbd3343b08f057f1e7
)
[p84d9] [2020-01-17 16:27:03.903538] 0000-546_auth.DEBUG: ilLogger::dump:101 stdClass Object
(
[nickname] => r.dekoster
[name] => r.dekoster@noordhoff.nl
[picture] => https://s.gravatar.com/avatar/1fcd5df7314b299da69cd6b879ffe39b?s=480&r=pg&d=https%3A%2F%2Fcdn.auth0.com%2Favatars%2Fr.png
[updated_at] => 2020-01-17T15:27:02.255Z
[email] => r.dekoster@noordhoff.nl
[email_verified] => 1
[iss] => AUTH0 URL
[sub] => INTENTIONALLY HIDDEN
[aud] => INTENTIONALLY HIDDEN
[iat] => 1579274822
[exp] => 1579310822
[auth_time] => 1579274822
[nonce] => 10df067ac08a7c2071e1988b82930e10
)
[p84d9] [2020-01-17 16:27:03.903602] 0000-546_auth.DEBUG: ilAuthProviderOpenIdConnect::handleUpdate:102 Authenticated external account: r.dekoster@noordhoff.nl
[p84d9] [2020-01-17 16:27:03.907864] 0000-546_auth.DEBUG: ilLogger::dump:96
[p84d9] [2020-01-17 16:27:03.967188] 0000-546_auth.DEBUG: ilAuthFrontend::authenticate:2422 Authentication user id: 0
[p84d9] [2020-01-17 16:27:03.967280] 0000-546_auth.DEBUG: ilAuthFrontend::authenticate:2422 Authentication failed against: ilAuthProviderOpenIdConnect
[p84d9] [2020-01-17 16:27:03.967307] 0000-546_auth.DEBUG: ilAuthFrontend::handleAuthenticationFail:201 Authentication failed for all authentication methods.
[p84d9] [2020-01-17 16:27:03.968609] 0000-546_auth.NOTICE: ilAuthFrontend::handleAuthenticationFail:201 Increased login attempts for user:
[p84d9] [2020-01-17 16:27:04.135914] 0000-546_auth.DEBUG: ilAuthSession::init:1115 Started new session.
[p84d9] [2020-01-17 16:27:04.136072] 0000-546_init.DEBUG: ilInitialisation::resumeUserSession:1080 Current session is invalid: p84d9elm84n98gcjqe3811vs50
[p84d9] [2020-01-17 16:27:04.136125] 0000-546_auth.DEBUG: ilInitialisation::blockedAuthentication:1303 Blocked authentication for cmd: showLoginPage
[p84d9] [2020-01-17 16:27:04.136160] 0000-546_init.DEBUG: ilInitialisation::resumeUserSession:1080 Authentication is started in current script.
[p84d9] [2020-01-17 16:27:04.156557] 0000-546_init.DEBUG: ilUserRequestTargetAdjustment::adjust:1650 Anyonymous request. No adjustment.
[p84d9] [2020-01-17 16:27:04.185625] 0000-546_init.DEBUG: ilStartUpGUI::showLoginPage:106 Showing login page
[p84d9] [2020-01-17 16:27:04.266038] 0000-546_auth.DEBUG: ilCaptchaUtil::checkFreetype:67 Function imageftbox is available.
I have no idea why it cannot login. I tried to look for documents but have only found the feature request so far.
I hope someone can clue me in on this. It's entirely possible I have setup something incorrectly.
Regards,
Rick