goauthentik / goauthentik/authentik

Multiple Client IDs per OIDC Issuer?

Open
#7,251 9 comments 18 reactions 0 assignees View on GitHub
question
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Describe your question**
Hello :wave: ,

is it possible to use different OIDC client ids that work on the same issuer?
I try to setup a software which consists of multiple different parts:
- A server, which gets the client id for the web client and the OIDC issuer URL
- A web client (provided by the server), which uses public client type and redirects back to the URL of the application
- A desktop client, which uses confidential client type and redirect to 127.0.0.1
- An app client, which uses confidential client type and redirects to an unknown url

In my first run i've setup the server (and therefore also the web client). I've created an OIDC provider and an application in authentik. Everything works fine so far.
If I use the desktop client or the app then it doesn't work anymore. Both of these force specific client ids and secrets. Therefore I've created more OIDC providers and applications with the requested client id and secret because apparently there is no way to assign multiple provders to one application or multiple client ids to one issuer.
I can get through the login flow with these but then the server says that the provided JWTs are invalid because the issuer is invalid.

Have I missed anything or am I right and this kind of setup is just not possible with Authentik?

**Relevant infos**
- OCIS 4.0.0+3c7bae407
- OwnCloud Desktop Client 5.0.0.12278

**Version and Deployment (please complete the following information):**

- Authentik: 2023.8.3
- Deployment: Docker

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.