You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/docs/marketplace/platform-supported-content/services/oidc-provider.md
+12-4Lines changed: 12 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -444,7 +444,7 @@ However, if you want the Provider app to act as an IAM broker, you need to redir
444
444
445
445
| Setting type | Current value | New value |
446
446
| --- | --- | --- |
447
-
| com.mendix.core.SamSiteCookies | LAX | LAX |
447
+
| com.mendix.core.SameSiteCookies | LAX | LAX |
448
448
449
449
## Configuring an OIDC Client
450
450
@@ -568,10 +568,18 @@ In versions of the OIDC Provider above 2.0.0, the sub value was changed from an
568
568
569
569
## Troubleshooting
570
570
571
-
### Infinite Loop of Redirects
571
+
### Infinite Loop of Redirects When the Provider App Acts as an IdP
572
572
573
-
The OIDC Provider service sets a cookie as a means to persist the session in the user’s browser. If the cookie is not properly set, this may lead to problems. For example, when the OIDC Provider service is used to build an IAM Broker, no session is established and the broker may initiate a new session at the upstream IdP, which results in an ‘infinite loop’ of redirects via the user's browser.
574
-
To ensure the cookie is properly set, the runtime setting com.mendix.core.SameSiteCookies must have value None. See [Environment Details](/developerportal/deploy/environments-details/#samesite) for more information how to set the correct value for SameSite runtime setting. Note that the default value for this setting changed in [Mendix 8.11](/releasenotes/studio-pro/8.11/).
573
+
The OIDC Provider service sets a cookie to persist the session in the user’s browser. If the cookie is not properly set, this may lead to problems. For example, when the OIDC Provider service is used to build an IAM Broker, no session is established and the broker may initiate a new session at the upstream IdP, which results in an ‘infinite loop’ of redirects via the user's browser.
574
+
To ensure the cookie is properly set, the runtime setting `com.mendix.core.SameSiteCookies` must have the value *None*. See [Environment Details](/developerportal/deploy/environments-details/#samesite) for more information on how to set the correct value for the SameSite runtime setting. Note that the default value for this setting is changed in [Mendix 8.11](/releasenotes/studio-pro/8.11/).
575
+
576
+
### Infinite Loop of Redirects When the Provider App Acts as an IAM Broker
577
+
578
+
When the OIDC Provider app is acting as an IAM broker, set the below values in the **Custom Runtime Settings** once you have deployed your application on Mendix Cloud and linked it to a licensed node.
0 commit comments