OIDC Provider Setup in Cloud Environment

0
I am working on implementing OIDC Brokering on my application Super App and Engg App where Super App acts as an OIDC Provider for the Engg App. Here I have configured manually the OIDC Provider Connection Details on the Super App and have passed the same SSO details to Engg App aswell. But when I am trying to login to the Engg App using the SSO I am getting below error: Connector: null 11:10:03 pmruntime-container/72nbjcom.mendix.systemwideinterfaces.MendixRuntimeException: java.lang.IllegalArgumentException: The value must not be null or empty string 11:10:03 pmruntime-container/72nbjat com.mendix.util.classloading.Runner$.withContextClassLoader(Runner.scala:23) 11:10:03 pmruntime-container/72nbj2025-09-23T17:40:03.262517912Z 11:10:03 pmruntime-container/72nbjCaused by: java.lang.IllegalArgumentException: The value must not be null or empty string 11:10:03 pmruntime-container/72nbjat com.nimbusds.oauth2.sdk.id.Identifier.<init>(Identifier.java:94) 11:10:03 pmruntime-container/72nbjat com.nimbusds.oauth2.sdk.id.Subject.<init>(Subject.java:42) 11:10:03 pmruntime-container/72nbjat openidconnectprovider.implementation.security.TokenManager.generateIDToken(TokenManager.java:111) 11:10:03 pmruntime-container/72nbjat openidconnectprovider.implementation.endpoints.AuthorizeEndpoint.processRequest(AuthorizeEndpoint.java:121) 11:10:03 pmruntime-container/72nbjat openidconnectprovider.implementation.OpenIDConnectProviderRequestHandler.processRequest(OpenIDConnectProviderRequestHandler.java:42)   Does Anyone have any idea what the issue can be here since it is working fine on my local environment.  Am I missing something here?  
asked
1 answers
0

Hello,

 

It looks like the issue is with the sub (subject) claim not getting a value when the ID token is created. Locally it works because the mapping is probably fine, but in your deployed setup the OIDC provider (Super App) isn’t sending a unique identifier for the user.

Try enabling TRACE logs for openidconnectprovider in Super App. You’ll be able to see which claims are being populated, and it’ll confirm whether the sub claim is missing. That usually fixes this type of error.

 

Regards

Reemali

answered