IGA 4.2 blank landing page - The issuer returned by the OAuth Issuer does not match the OAuth Issuer URL

Hi!

We do have a freshly installed IGA 4.2 that starts without any errors in catalina log
Using IGA ond OSP installed on the same Windows server ...

When trying to access the site using fqdn (https://iga.domain.td) I get redirected to a blank page https://iga.domain.td/#/landing .

When checking in DevTools in Edge there is a error:

"Uncaught - The issuer returned by the OAuth Issuer (servername.domain.td/.../oauth2) does not match the OAuth Issuer URL (iga.domain.td/.../oauth2)

Any Ideas ?

/Peter

Parents
  • I am ran into same issue today and found your post during troubleshooting.   I took same approach, where the fqdn used in IG config was different from the servername.  I had both URLs as SANs in the certificate.   

    I suspect if we raised the osp log level you'd see the mismatch there too.  The solution was to the configuration parameter: com.netiq.idm.osp.tenant.http-interfaces=url:port/osp  to the ism-configuration.properties file. 

    This is same approach as detailed here, where same issue can happen with the identity apps:  https://support.microfocus.com/kb/doc.php?id=7024305

    This likely to late to help you, but posting here should others come across the same thread.

     

Reply
  • I am ran into same issue today and found your post during troubleshooting.   I took same approach, where the fqdn used in IG config was different from the servername.  I had both URLs as SANs in the certificate.   

    I suspect if we raised the osp log level you'd see the mismatch there too.  The solution was to the configuration parameter: com.netiq.idm.osp.tenant.http-interfaces=url:port/osp  to the ism-configuration.properties file. 

    This is same approach as detailed here, where same issue can happen with the identity apps:  https://support.microfocus.com/kb/doc.php?id=7024305

    This likely to late to help you, but posting here should others come across the same thread.

     

Children