404 error on oauth authz endpoint

We upgraded from 4.5.3.3 to 5.0.1.1 and now are getting a 404 error on the authz endpoint with our apps that use .net 4.6 and Microsoft.Owin.Security.OpenIdConnect. All of our other oauth clients work fine. The client makes a request like this and NAM returns the 404 error:

https://xxx.example.com/nidp/oauth/nam/authz?client_id=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&redirect_uri=https%3A%2F%2Fyyyyy.example.com%2Fcallback&response_type=code%2Bid_token%2Btoken&scope=openid%2Bprofile%2Bemail&state=OpenIdConnect.AuthenticationProperties%3DCo3T2iBIsJ5N6k6JulAxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxYhHYM8rJNADVv5kwayXhH9YPt0ncRCLitxvvqMGIeqn1iEEdfJpoO1JncRv7-0&response_mode=form_post&nonce=637xxxxxxxxxxxxxxxxxxxxxxxxxiLWEwMjMtMTJmYTVhYWUyYjZiMTZmOWFkNWYtNTQ5MS00NGZkLThhMDgtMGM0MDkzY2Y5YTQw&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0

I have a case opened on the issue. It sounds like someone had a similar case open before, but I haven't heard back on it yet.

Has anyone run into this?

Thanks,
Jeremiah

Top Replies

0 Sebastijan Sef
4 months ago

Hi!

First of all, I have not seen this error it. But looking at your request, one thing I can see that sticks our is non default response_mode (default for response_type=code is query, not form_post).

I understand that it worked before, but just out of curiosity, is maybe this differentiator between working and non-working oauth clients?
Cancel
Up +1 Down

Reply

Verify Answer

Cancel
0 jrmhscht
4 months ago in reply to Sebastijan Sef

I think you are right that the form_post is the issue. If I change that to query it doesn't give a 404. I am working with our developers to see if they can update the app to work with query, but so far they are having trouble getting it to work on this older .net app.

Support did say they have a potential fix, but I haven't seen that yet.

Thanks,
Jeremiah
Cancel
Up 0 Down

Reply

Verify Answer

Cancel
Verified Answer

+1 jrmhscht
3 months ago in reply to jrmhscht

Support sent me a missing jsp which fixed the issue with oauth form_post. They say it will be fixed in 5.0.2.
Cancel
Up +1 Down

Reply

Reject Answer

Cancel

Menu

NetIQ Access Manager

404 error on oauth authz endpoint

Top Replies

Verified Answer

Resources