JWT Bearer flow is still successful when IDP (Identity Provider)'s status is inactive

Products

• VIP Authentication Hub

Issue/Introduction

Sending JWT Bearer flow request is still successful getting Access/Identity token in VIP AuthHub 2.1.5, although IDP (Identity Provider)'s status is inactive.

Environment

VIP AuthHub 2.1.5

Resolution

This issue has been rectified in VIP AuthHub 2.2 version onward.

When IDP (Identity Provider)'s status is inactive, the response of JWT Bearer flow request will be "Invalid Assertion"

{

    "clientTxnid": null,

    "error": "invalid_request",

    "error_description": "Invalid assertion"

}

Upgrade to VIP AuthHub 2.2 version or later to address this issue.