You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Unfortunately, I am not able to see any attribute getting passed to the user on the OCP side.
What is a good way of troubleshooting this connection issue? Is there a way to see what OCP is receiving when it authenticates with the OpenID provider?
How do others typically troubleshoot OpenID OAuth issues?
I tried issuing these commands, but not much great information is returned:
$ oc get user basebox
$ oc get identity
$ oc describe user 4UoutDDo7kyP18ZHlNXfsh-yuxgI6KYD6jkI1Nz3UHk
$ oc describer identity AAD:4UoutDDo7kyP18ZHlNXfsh-yuxgI6KYD6jkI1Nz3UHk
Sorry, if this is the wrong place to post a question like this. This is the closest support forum that I could find.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Hi Folks 👋
I'm trying to get email and groups attributes from Azure AD into OCP using OpenID Connect OAuth.
I'm following this documentation: https://docs.openshift.com/container-platform/4.12/authentication/identity_providers/configuring-oidc-identity-provider.html#identity-provider-oidc-CR_configuring-oidc-identity-provider
Unfortunately, I am not able to see any attribute getting passed to the user on the OCP side.
What is a good way of troubleshooting this connection issue? Is there a way to see what OCP is receiving when it authenticates with the OpenID provider?
How do others typically troubleshoot OpenID OAuth issues?
I tried issuing these commands, but not much great information is returned:
Sorry, if this is the wrong place to post a question like this. This is the closest support forum that I could find.
Thank you for your time 🙏
Beta Was this translation helpful? Give feedback.
All reactions