Forum Discussion

wilfordbrimley's avatar
wilfordbrimley
Icon for Nimbostratus rankNimbostratus
Jan 09, 2025

EntraID + F5 as Oauth client/resource server not sending ID Token to app

Hello,   Here is the basic setup.  F5 is configured to use EntraID and is set up as the client+resource server. When a user logs into the web app via EntraID they are able to login just fine. Ho...
entraid
help
oauth
wilfordbrimley's avatar
wilfordbrimley
Icon for Nimbostratus rankNimbostratus
Jan 23, 2025

The "scope" field was blank before. The web app accepted the access token sent by the F5 APM, but if the web app tried to validate the token signature, the signature was invalid. This also occured when trying to validate the token on https://jwt.io.

however, once we added the above scope, the token signature was successfully validated by both the web app, and jwt.io