• Resolved everythingred

    (@everythingred)


    • [2023-05-14 23:24:17] Wpo\Services\Authentication_Service::authenticate_oidc_user -> ID token could not be extracted from request storage.
    • [2023-05-14 23:24:17] Wpo\Services\Id_Token_Service::process_openidconnect_code -> Error occured whilst fetching from https://login.microsoftonline.com/*/oauth2/v2.0/token: AADSTS7000215: Invalid client secret provided. Ensure the secret being sent in the request is the client secret value, not the client secret ID, for a secret added to app ‘*’. Trace ID: * Correlation ID: * Timestamp: 2023-05-14 23:24:17Z
    • [2023-05-14 23:24:10]?Wpo\Services\Authentication_Service::authenticate_oidc_user -> ID token could not be extracted from request storage.

    How do I fix this issue? I have a user who logged in through wp-login.php so was that an issue? I didn’t have any issues before.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Marco van Wieren

    (@wpo365)

    Hi @everythingred

    I don’t think you see this error because someone signed in with a local WordPress account. This error occurs when a user has signed in with Microsoft successfully and the plugin has received an authorization code. Then the plugin tries to connect to the /token endpoint to retrieve an ID token but that fails. The error mentions that the Application (client) secret is not accepted. So in your case I recommend that you create a new Client secret for your App registration in Azure AD, copy its value (not its ID) and paste the copied value in the corresponding field on the plugin’s Single Sign-on configuration page.

    Hope this helps!

    -Marco

    PS You can also have a look at this article for steps how to create a Client secret.

    Plugin Author Marco van Wieren

    (@wpo365)

    Hi @everythingred

    I am closing this topic because I haven’t heard back from you.

    Thanks!

    -Marco

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Broken login’ is closed to new replies.