OpenID Connect 1.0 Configuration
TL;DR;
- The OIDC discovery document for BadIdP is served at
https://api.badidp.com/oidc/.well-known/openid-configuration - BadIdP does not require credentials (will accept/ignore any values for
client_idandclient_secret) - BadIdP will respond adequately to any OAuth2.0 flow from your service provider
Integration Parameters
Discovery Document
In order to configure BadIdP as an OpenID Connect 1.0 identity provider, you must point your service provider to the OpenID Discovery configuration found at https://api.badidp.com/oidc/.well-known/openid-configuration (or otherwise configure it manually with the endpoint definitions there).
Credentials
No credentials are needed for BadIdP but if you need to provide a client_id and client_secret to your service provider, you may provide any values. BadIdP will accept/ignore all values.
OAuth2.0 Flow Support
BadIdP supports ALL valid and invalid OAuth2.0 flows and will respond adequately to any request from the service provider (i.e. handles all combinations of response_type and response_mode).
response_type | response_mode | Common Flow Name / Alias | Valid OAuth2.0 | BadIdP Support |
|---|---|---|---|---|
code | query (default) | Authorization Code Flow | ✅ | ✅ |
code | form_post | Code Flow with form POST | ✅ | ✅ |
code | fragment | Code Flow (nonstandard) | ✅ | ✅ |
token | fragment (default) | Implicit Flow (Access Token only) | ✅ | ✅ |
token | query | INVALID | ❌ | ✅ |
token | form_post | INVALID | ❌ | ✅ |
id_token | fragment (default) | OIDC Implicit Flow (ID Token only) | ✅ | ✅ |
id_token | form_post | ID Token via form POST | ✅ | ✅ |
id_token | query | INVALID | ❌ | ✅ |
id_token token | fragment (default) | OIDC Implicit Flow (ID Token + Access Token) | ✅ | ✅ |
id_token token | query | INVALID | ❌ | ✅ |
id_token token | form_post | INVALID | ❌ | ✅ |
code id_token | fragment (default) | Hybrid Flow (Code + ID Token) | ✅ | ✅ |
code id_token | form_post | Hybrid Flow (secure POST) | ✅ | ✅ |
code id_token | query | Hybrid Flow (less common) | ✅ | ✅ |
code token | fragment (default) | Hybrid Flow (Code + Access Token) | ✅ | ✅ |
code token | form_post | Hybrid Flow (form_post) | ✅ | ✅ |
code token | query | Hybrid Flow | ✅ | ✅ |
code id_token token | fragment (default) | Hybrid Flow (All three) | ✅ | ✅ |
code id_token token | form_post | Full Hybrid via form | ✅ | ✅ |
code id_token token | query | Hybrid Flow | ✅ | ✅ |