使用Apple指南登录-身份提供商已在使用元数据终结点 [英] Sign in with Apple guide - the metadata endpoint is already in use by an identity provider

问题描述

遵循指南设置以Apple作为自定义OpenID Connect身份提供者的身份登录，到最后，单击保存"，并出现错误:

Following the guide Setting up Sign in with Apple as a Custom OpenID Connect identity provider I get to the end, I click Save and I get the error:

在元数据端点发现发行人' https://appleid.apple.com " {我的端点}已被身份提供商使用."

"The issuer 'https://appleid.apple.com' found at the metadata endpoint {my endpoint} is already in use by an identity provider."

我想念什么?指南仍然有效吗?

What am I missing? Is the guide still valid?

此问题也已在GitHub上作为 issue 提出. .

This question have also been raised as an issue on GitHub.

推荐答案

当您有两个自定义身份提供程序(其元数据点具有相同的颁发者)时，将显示此错误.

This error is shown when you have two custom identity providers, the metadata point for which have the same issuer.

请在well known endpoints(/.well-known/openid-configuration)处检查元数据文档，以了解您现有的自定义身份提供商.

Please check metadata document at well known endpoints (/.well-known/openid-configuration) for your existing custom identity providers.

在此处检查issuer字段.如果您在其他元数据终结点上已经有一个Issuer字段，则将收到此错误.

Check for issuer field there. If you already have an issuer field on other metadata endpoints, you will get this error.

Azure AD B2C强制执行独立发行人.原因是用户的唯一ID取决于该系统中的客户端ID.如果您在Facebook中有两个应用程序，Facebook将为使用不同应用程序的同一用户提供单独的唯一用户ID.因此，AADB2C希望仅通过一个身份提供者建立与一个发行者的连接.

Azure AD B2C enforces the distinct issuer. The reason being that unique id of the user depends on the client Id in that system. If you have two apps in Facebook, Facebook will give you separate unique user Id for same user using different apps. So AADB2C wants that connection to one issuer is established through only one identity provider.

更新1 这似乎是一个真实的问题.然而，推理将是相同的.会通知工程人员.

Update1 This seems to be a real issue. However the reasoning will be same. Will notify the engineering.

更新2 此问题的修复程序已推出.

Update2 The fix is rolled out for this issue.

这篇关于使用Apple指南登录-身份提供商已在使用元数据终结点的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！