Skip to content

Commit 5235c02

Browse files
Merge pull request #11143 from mendix/kv-provider-troubleshooting
OIDC Provider: Improve troubleshooting
2 parents f3ae75b + ce4d018 commit 5235c02

1 file changed

Lines changed: 12 additions & 4 deletions

File tree

content/en/docs/marketplace/platform-supported-content/services/oidc-provider.md

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -444,7 +444,7 @@ However, if you want the Provider app to act as an IAM broker, you need to redir
444444

445445
| Setting type | Current value | New value |
446446
| --- | --- | --- |
447-
| com.mendix.core.SamSiteCookies | LAX | LAX |
447+
| com.mendix.core.SameSiteCookies | LAX | LAX |
448448

449449
## Configuring an OIDC Client
450450

@@ -568,10 +568,18 @@ In versions of the OIDC Provider above 2.0.0, the sub value was changed from an
568568

569569
## Troubleshooting
570570

571-
### Infinite Loop of Redirects
571+
### Infinite Loop of Redirects When the Provider App Acts as an IdP
572572

573-
The OIDC Provider service sets a cookie as a means to persist the session in the user’s browser. If the cookie is not properly set, this may lead to problems. For example, when the OIDC Provider service is used to build an IAM Broker, no session is established and the broker may initiate a new session at the upstream IdP, which results in an ‘infinite loop’ of redirects via the user's browser.
574-
To ensure the cookie is properly set, the runtime setting com.mendix.core.SameSiteCookies must have value None. See [Environment Details](/developerportal/deploy/environments-details/#samesite) for more information how to set the correct value for SameSite runtime setting. Note that the default value for this setting changed in [Mendix 8.11](/releasenotes/studio-pro/8.11/).
573+
The OIDC Provider service sets a cookie to persist the session in the user’s browser. If the cookie is not properly set, this may lead to problems. For example, when the OIDC Provider service is used to build an IAM Broker, no session is established and the broker may initiate a new session at the upstream IdP, which results in an ‘infinite loop’ of redirects via the user's browser.
574+
To ensure the cookie is properly set, the runtime setting `com.mendix.core.SameSiteCookies` must have the value *None*. See [Environment Details](/developerportal/deploy/environments-details/#samesite) for more information on how to set the correct value for the SameSite runtime setting. Note that the default value for this setting is changed in [Mendix 8.11](/releasenotes/studio-pro/8.11/).
575+
576+
### Infinite Loop of Redirects When the Provider App Acts as an IAM Broker
577+
578+
When the OIDC Provider app is acting as an IAM broker, set the below values in the **Custom Runtime Settings** once you have deployed your application on Mendix Cloud and linked it to a licensed node.
579+
580+
| Setting type | Current value | New value |
581+
| --- | --- | --- |
582+
| com.mendix.core.SameSiteCookies | LAX | LAX |
575583

576584
### On-premise Deployment and IIS
577585

0 commit comments

Comments
 (0)