Using veracity as identity provider for apache

1

I want to use Veracity identity as identity provider for authentication to apache2/httpd server.

I have configured the apache2 server for this and added a service in veracity, but I struggle getting it to work.

I get redirected to login, but coming back, the apche server responds with:

Error:

OpenID Connect Provider error: Error in handling response type.

Does anyone have experience setting up veracity identity as authenticator for apache2?
Is it even possible?
BTW. I have managed to do it using GITlab as the id provider.

2

Hi Arild. Somebody within our organization might have used mod_auth_openidc (is that the module you are using?). But before I try to track them down, can you please share your configuration (without secrets)?

Kind regards,

Emil Müller
Veracity

3

Hi Emil,

Thanks for reaching out. I had another go at the config and managed to get it to work, So for reference here is the config I used.

Step 1: In the Veracity identity portal create an app :

image001.png941×405 11.1 KB

Step 2: config apache2

In the apache virtual host conf: /etc/apache2/sites-enabled/000-default-le-ssl.conf

We have

ServerName discdemo.northeurope.cloudapp.azure.com

<Location /protected/>

AuthType openid-connect

Require valid-user

and in /etc/apache2/mods-enabled/auth_openidc.conf

we have

1 Like