[NIFI-7328] Improve OIDC Identity Provider

• Type: Epic
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.11.4
• Fix Version/s: 1.16.0
• Component/s: Core Framework, Extensions
• Labels: authentication identity keystore logging oidc security tls
• Epic Name: Improve OIDC Identity Provider
• Epic Status: To Do
• Assignee: Nathan Gough
• Reporter: Andy LoPresto
• Created: 07/Apr/20 18:09
• Updated: 18/Feb/22 20:24
• Resolved: 18/Feb/22 20:24

Description

A number of issues with the OIDC identity provider have been discovered recently.

• The logging is insufficient to debug issues with the IdP
• It does not use the NiFi keystore & truststore but rather the JVM default
• There are grammatical and syntactic errors in log and error messages
• It may not process all claims in the IdP response correctly