Compatible with WHMCS?

[drumship3]

I am just verifying if this is compatible with whmcs openid connect? I am continually getting: ERROR (invalid-user-claim): Invalid user claim. I probably have a setting wrong.

[timnolte]

Are you using WHMCS as your IDP? I have not tested it personally, however so long as WHMCS supports the OpenID Connect standard there shouldn't be an issue.

[drumship3]

yes I am. Thanks for your fast reply! I am sure i have something set wrong as I am new to this!

[timnolte]

Yeah, unfortunately I don't have a WHMCS instance available to test with, given it's commercial with no free licensing available. I'm not sure if it would be helpful for you to review some of our IDP setup guides that might give you hints as to the proper configuration on the WHMCS side.

[timnolte]

There is mention of something that might work in terms of setting the UserInfo endpoint blank. Have you tried that?

#152

[drumship3]

I will try that now....

[timnolte]

It might also be helpful to know what scopes you are trying to use and also which claims WHMCS support. There are some details about claims here for your information:

https://connect2id.com/products/server/docs/guides/requesting-openid-claims

[drumship3]

no, it still isn't working it returned: ERROR (no-username): No appropriate username found.

OpenIDScope: email profile openid

[timnolte]

OK, well that is a different error, so it's not running into the same issue. How do you have the plugin settings setup in terms of username to use from your IDP and whether to create a new user if it doesn't exist or can't find a match?

[drumship3]

i have it checked to create user if doesn't exist....

[drumship3]

what setting is this?: username to use from your IDP

[timnolte]

Have you taken a look at the .well-known OpenID Connect configuration endpoint to see what it says are the settings to use? I'm looking at the documents here and it provides examples of the Authorization Endpoint.

https://docs.whmcs.com/OpenID_Connect_Developer_Guide

[drumship3]

no i have not...i will look at it now...

[drumship3]

i did not notice any change in behavior. I added this: htaccess in public_html root and changed the path to /clients where whmcs is installed.

OpenID Discovery Document (http://openid.net/specs/openid-connect-discovery-1_0.html)

RewriteRule ^.well-known/openid-configuration ./clients/oauth/openid-configuration.php [L,NC]

[timnolte]

So what I'm asking is not about change in behavior. You should be able to load your /.well-known/openid-configuration endpoint in your browser and see all of the proper configuration items to use. For example on one of my test IDPs I have this endpoint which you can access and see what sort of response is returned.

https://keycloak.oidcwp.net/auth/realms/oidcwp-net/.well-known/openid-configuration

[drumship3]

yea ok. excellent! I will look closely at this!