goauthentik / goauthentik/authentik
Multiple Client IDs per OIDC Issuer?
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
**Describe your question**
Hello :wave: ,
is it possible to use different OIDC client ids that work on the same issuer?
I try to setup a software which consists of multiple different parts:
- A server, which gets the client id for the web client and the OIDC issuer URL
- A web client (provided by the server), which uses public client type and redirects back to the URL of the application
- A desktop client, which uses confidential client type and redirect to 127.0.0.1
- An app client, which uses confidential client type and redirects to an unknown url
In my first run i've setup the server (and therefore also the web client). I've created an OIDC provider and an application in authentik. Everything works fine so far.
If I use the desktop client or the app then it doesn't work anymore. Both of these force specific client ids and secrets. Therefore I've created more OIDC providers and applications with the requested client id and secret because apparently there is no way to assign multiple provders to one application or multiple client ids to one issuer.
I can get through the login flow with these but then the server says that the provided JWTs are invalid because the issuer is invalid.
Have I missed anything or am I right and this kind of setup is just not possible with Authentik?
**Relevant infos**
- OCIS 4.0.0+3c7bae407
- OwnCloud Desktop Client 5.0.0.12278
**Version and Deployment (please complete the following information):**
- Authentik: 2023.8.3
- Deployment: Docker
Contributor guide
Assessment
This issue has not been assessed yet.