Howto configure Apache Solr 9 using the OIDC protocol with Microsoft ADFS 2016 or newer

[BCT Roel de Wildt <ro...@bctsoftware.com.INVALID>]

Hello,

I think there is a bug in Apache Solr 9.0's jwt-auth module regarding the "scope" attribute in the access token with Microsoft ADFS 2016 or newer.

For example, Keycloak returns the "scope" attribute as scope, this works. But ADFS returns this as scp and the jwt-auth module is probably not configurable between "scope" and "scp" without recompiling the module.

I don't see an option in the documentation to set this attribute, or is there a hidden setting that isn't in the module's documentation?

Has anyone gotten ADFS with OIDC working with Apache Solr?

Kind regards,


Roel de Wildt
Software Engineer




General: +31 (0)46 442 45 45
Servicedesk: +31 (0)46 442 50 20

[cid:image001.png@01D9107B.72921B60]<https://bctsoftware.com/>



P.O. box  59
6130 AB Sittard
Hub Dassenplein 3
6131 LB Sittard
www.bctsoftware.com<https://bctsoftware.com>
BCT is a business name of BCT BV

[New call-to-action]<https://cta-redirect.hubspot.com/cta/redirect/1972206/1f9cee5a-ee94-43bb-8022-75e8cfde604c>

DISCLAIMER<https://www.bctsoftware.com/nl/postni/e-mail-disclaimer-english/>
Think of the environment before printing this message.
[YouTube]<https://www.youtube.com/BCTbv>

[Twitter]<https://twitter.com/BCTsoftware>

[linkedIn]<https://www.linkedin.com/company/bctsoftware>