OpenID Connect in ASP.NET - at_hash validation [closed]


OpenID Connect in ASP.NET - at_hash validation [closed]



I try to use OpenID Connect authentication against a well known IDP. I have tried from both ASP.NET and ASP.NET Core.



Here is how I enable the OpenID Connect authentication in my ASP.NET Core 2.0 project:
enter image description here



I get the same error in both projects:


OpenIdConnectProtocolInvalidAtHashException: IDX21312: The 'at_hash' claim was not found in the 'id_token', but a 'access_token' was in the OpenIdConnectMessage, 'id_token'



I see that the returned token does not contain the at_hash claim, but that should be ok since it is not mandatory. Is there a way to skip this validation?



This question appears to be off-topic. The users who voted to close gave this specific reason:




Popular posts from this blog

Boo (programming language)

How to make file upload 'Required' in Contact Form 7?