Re: [Unity-idm-discuss] Algorithm on token introspection

[Sander A. <sa....@fz...>]

Good morning Krzystzof,
thanks for the update.

Best regards,
Sander

On Wed, 2025-10-22 at 22:29 +0200, Krzysztof Benedyczak wrote:
>  
> Hi Sander,
>  
> 
>  
>  
> Thanks for the stack trace. Bernd was was fully right. After
> verification: we don't support verification of tokens, when an IdP
> has more than one signing key. Actually it does not matter that there
> are different algorithms: it wouldn't work even with the same
> algorithm but two different keys (just the error would be different).
> Only the first key from metadata works.
>  
> I'm opening a ticket to cover that. Unfortunately it doesn't seem as
> an easy fix.
>  
> Best,
>  Krzysztof
>  

-- 
Large-Scale Data Science
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Jülich GmbH
52425 Jülich
Sitz der Gesellschaft: Jülich
Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Stefan Müller
Geschäftsführung: Prof. Dr. Astrid Lambrecht (Vorsitzende),
Dr. Stephanie Bauer (stellvertretende Vorsitzende),
Prof. Dr. Ir. Pieter Jansens, Prof. Dr. Laurens Kuipers
-----------------------------------------------------------------------
-----------------------------------------------------------------------