Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

OidcServerException in Jazz Authorization Server when login to the jazzop registration form

Hi there!

I installed the Jazz Authorization Server, setup the ldapUserRegistry.xml, server.xml and the appConf.xml with my Jazz Group/Role map.

I do access "... :9643/oidc/endpoint/jazzop/.well-known/openid-configuration" url and got the json document.

So I tried the "... :9643/oidc/endpoint/jazzop/registration" url and I was prompted for login credentials. I informed a user that is in my LDAP user registry who has Jazz administrative privileges (JazzAdmins hole) and got a small JSON document showing only this line: Data []

The messages.log shows:
"com.ibm.oauth.core.api.error.OidcServerException: The user is not authenticated, or is not in the role that is required to complete this request com.ibm.ws.security.oauth20.web.OAuth20EndpointServices 324"

The ffdc.log shows:
------Start of DE processing------ = [17/03/25 16:49:34:470 BRT]
Exception = com.ibm.oauth.core.api.error.OidcServerException
Source = com.ibm.ws.security.oauth20.web.OAuth20EndpointServices
probeid = 324
Stack Dump = com.ibm.oauth.core.api.error.OidcServerException: The user is not authenticated, or is not in the role that is required to complete this request


I Map an Administrator for Jazz Authorization Server in appConfig.xml file as following:

Application session:

<application
     id="com.ibm.team.integration.jazzop"
     location="jazzop.war"
     name="com.ibm.team.integration.jazzop"
     context-root="jazzop"
     type="war">
        <application-bnd>
            <security-role name="JazzAdmins">
                <group name="G DF5229 JazzAdmin"/>
            </security-role>
        </application>


Oauth session:
            
<oauth-roles>
        <authenticated>
            <special-subject type="ALL_AUTHENTICATED_USERS" />
        </authenticated>
        <clientManager>
            <group name="G DF5229 JazzAdmin" />
        </clientManager>

    </oauth-roles>

Could someone help? Thanks!

1 vote


Be the first one to answer this question!

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 7,608
× 1,437
× 87
× 31
× 1

Question asked: Mar 18 '25, 11:14 a.m.

Question was seen: 6,503 times

Last updated: Mar 18 '25, 11:14 a.m.

Confirmation Cancel Confirm