OGG-25680
Could not get access_token to authorize request to the JSON Web Key. The JSON Web Key could not be loaded or the JSON Web Key URI cannot be reached using an unauthorized request.
Cause
A request to the Identity Provider Tenant using the provided Client ID and Client Secret to obtain access to the jwks_uri failed. The jwks_uri URI described in the OpenID discovery docs could not be reached, does not contain a correct JSON Web Key, or is not available without authorization.
Action
Make sure that the JSON Web Key Set URI, described under 'jwks_uri' in the OpenID discovery page, is a correct URI and contains a valid JSON Web Key.
If using an IDCS or IAM Authorization Profile confirm that:
- The Confidential Application is configured correctly.
- Client ID and Client Secret values in the Authorization Profile are correct.
If using an OAM type Authorization Profile:
- Confirm the identityDomain value is written correctly
- Confirm with your OAM administrator that the identityDomain value is a valid Identity Domain inside the OAM tenant.
OGG-25680
Could not get access_token to authorize request to the JSON Web Key. The JSON Web Key could not be loaded or the JSON Web Key URI cannot be reached using an unauthorized request.
Cause
A request to the Identity Provider Tenant using the provided Client ID and Client Secret to obtain access to the jwks_uri failed. The jwks_uri URI described in the OpenID discovery docs could not be reached, does not contain a correct JSON Web Key, or is not available without authorization.
Action
Make sure that the JSON Web Key Set URI, described under 'jwks_uri' in the OpenID discovery page, is a correct URI and contains a valid JSON Web Key.
If using an IDCS or IAM Authorization Profile confirm that:
- The Confidential Application is configured correctly.
- Client ID and Client Secret values in the Authorization Profile are correct.
If using an OAM type Authorization Profile:
- Confirm the identityDomain value is written correctly
- Confirm with your OAM administrator that the identityDomain value is a valid Identity Domain inside the OAM tenant.
