Since IDPConfiguration issuers are no longer guaranteed to be unique, selecting the correct IDPConfiguration registration that should apply to an OIDC authentication attempt is no longer as simple as matching the IDPConfiguration's issuer to the token's issuer claim. The server must now also match the IDPConfiguration's audience to the token's audience claim.
- duplicates
-
SERVER-86821 Use single JWKManager for multiple IDP configurations with the same issuer
-
- Closed
-