Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-06-15 10:29:42 INFO
TEST-RUNNER
Test instance QZoiwqMDKz3pgLm created
baseUrl
https://www.certification.openid.net/test/a/ForgeRockAM
variant
{
  "client_auth_type": "mtls",
  "ciba_mode": "poll",
  "fapi_profile": "plain_fapi",
  "client_registration": "static_client"
}
alias
ForgeRockAM
description
FAPI CIBA OP w/ MTLS Conformance for ForgeRock Identity Platform
planId
ec5rjoLDfXPCB
config
{
  "alias": "ForgeRockAM",
  "server": {
    "discoveryUrl": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "itssCibaClient3",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "p": "3VzCiRV5-lxEkAMXWrUCWTIh6u2V7Qe6zKAxp-HTE-w5_PZO5yTEls5Ou3aSRk-B3zjYqWyut9kzFUlTolRSmZoCv_zUTHHs3k4jiAvSTLKXOXPqOV621OMrbCxZQuVgA5w-e9-o5oDC6Zlo2tF9ElPCxHh6l2TbbSM6YSdcmN0",
          "kty": "RSA",
          "q": "quzG4ij7S43qxK1VHBe3oA01ARXileIvQTbOyF7Gm17DOne9S-eewAgOAYDmZfwdVjlVh5MGrckXFJKFeyW403sbQN98EzOKoUmlaKpgN5ke2YlfigmYDI8LBcqbOqyjPTHfmXHLTX1XWwFzLsMNaPqpFMfSb1yDi4Ggnzx1H6s",
          "d": "hkq4xawZl39zontdf6muqy-AHbwcO8yUcNPyRQIGLTl12xxiHs_MSxn1I0p30AL6zXKsSKeimimBa4tO-Mv7l2PRAVrZvnfwM01UfYOcRAtBZICq_4bm-iBfZoywnomjNn9NUMKhMEEZ6bj5H--p0AM9xPO6zQLFBVLHD443juUbWrB3CNFhqbIGzJlWjEnmA9V6oGhEZWQN6LeXeDtYt5Q1XXCpps8TmC1bxzYQmTJTY9gJTgPei7rZuNg4Tm7VRH9KVzt4gvUTAdVq62tJLkXLO8HFCn9gdxhS5FEDgH8x6ZMY8t2ul7mV1NZ5n3kSpovBAYdM7KrEc7V4CUv2oQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "itssCibaClient1",
          "x5c": [
            "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\u003d\u003d"
          ],
          "qi": "nd7bietAFh-d2vZj1zw8A2Ka9hvmZpUiuMa_nQnEtcGeo53_AF-hpvaM7_GFkA_LbTSFIy87zmYw66YrZyc6gGHr5NShqX_yJhPFyaGohJYAJiRyOGIHx2dyYsUMXDbUMKrIV7DsrMKgBy_jdMSO3oj1kyBzNi7bNQfeTYaSRys",
          "dp": "l9YdldwGXAVX_hQwu8Y3AymQ_EzVLs3DgsJK7SXIG_1H1Uy52HBu7CY8-Pce5F167rtWWfgza-Xu1SYD2O_P7I4oXro0gO8QE3gzhQjeyj8h3YW13n4qGKJt0XgmDe25yyAr99n1R46Ao6zXsGhLSvvrN8qQBDJpFFY6oBNYv30",
          "alg": "PS256",
          "dq": "E9ZDBsBm2c_wrT7In-gIwaSGwEd_8pE7lr_7o7mMJ0AKPGDlMUgCXpsQtQ_2rWNjLDyfNorTvZuW-CZBI5evKawh75eAWOIkdq-LaOhNHmbA89JDqkuOv_Zh-xwWg-rBTzrYjoBsbePcHY2_hm_QwJxGv0ipnY8JHUnAEHr9xN0",
          "n": "k8xWq6xsWgJrwoCGPyQWcd2NkISXXFR4BLajF80CfX8Td_QFACm7OkU7pE7gCvuyIywvPC-3XvU7voC1DzJrxBX6fCxYXBwyMUYS2_lwTpWqMJr4WTjch1TV4cCTqRmc2OOxuR3ybWmCESyaHcmHqNZBWK_zWMYKUXC9cYjt-7FN9PKmYyOwECK1_yGfWvm2cpUCxbJ7tzRfggqryO1DLPxX9Hqp-aFOt7A1V7WUyPXhVNvB-MQwK1Crf-zuHNH9TeJhDMNzFqi48AVAKWviy65XpLKT4NaSTXe_a03gKakWKW8JZHeQCGL_WVfgv2NnX9EmS7QK0EL2pIUSKl3enw"
        }
      ]
    },
    "acr_value": "poll",
    "hint_type": "login_hint",
    "hint_value": "e8a0914a-be03-11eb-8529-0242ac130003"
  },
  "resource": {
    "resourceUrl": "https://frfapi.catalyst.forgerock.org/protectedResource",
    "institution_id": "0015800001041REAAY"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIICsTCCAZkCAQIwDQYJKoZIhvcNAQELBQAwIzEhMB8GA1UEAwwYRm9yZ2Vyb2Nr\nIENlcnQgQXV0aG9yaXR5MB4XDTIxMDYxMjE4Mzk0N1oXDTIyMDYxMjE4Mzk0N1ow\nGjEYMBYGA1UEAwwPaXRzc0NpYmFDbGllbnQzMIIBIjANBgkqhkiG9w0BAQEFAAOC\nAQ8AMIIBCgKCAQEAwNX1a56B8Ba5Z+F7Cl5F99YXItTuo1jMVzkWMBRDJKeevgaq\nFype4ag0sitl9TFgG4IDwnGJm6xlPIxOF6Zh8M5ur1L78j1yFdr7CY5oF8Dyt83a\nfyeFb6I2oZtjW4LATuQNVwhWpzL1SBh+tEDJLsX7THhG1+AkCa6wRJDRWR/y+arm\nDn4tTUmjg/VMNVhXgX0ZCxFpMIPETlbd1SqPVoos4JcjyPocVrTwFc7kcSWXcBU8\nZ8fjFEtf8tHnk51ziPkjp6LSz3VU1y20YNYXYvQbpIK3ii4OWXlFz8gNmTDXaQRP\nJ2j3ztDaZwswevc9wkXtRJij/gpQ8DLrgEDmoQIDAQABMA0GCSqGSIb3DQEBCwUA\nA4IBAQAWWAURXL3Lso7lv7kzyiq1qmZBedmlP1xwWeDBn2pYxsTJq78g19rieUw0\nhd3zcJ/qAofa2CEn25jby6wXyx+seFKKtpN9xr5yNle4WXfM93s0c+UcJ5jDTkp8\nHEUKVFIBqxhV8F+EnahAqx1KWic4NimGLgG6c+Qt1xRZtCsZmQDaxA8qflCIbtUM\njBZWEHsFk2STewVKXyz2XRS4+LXeSoJFsgmtfgfspJxY/OhlEgJMzl0K6UUApEQd\n2fB4gpQWij7IvRzPDTjt8+ep3alQJKbNIoSYpJRF8C+K+z5+jVjWRoPYSbYhtwDR\n3B2OwN/n3J+HwzRzziyDe3wtMs7e\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\n+3+ohb5krjRu71BQziZpqw\u003d\u003d\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIDJzCCAg+gAwIBAgIULbYcRJme6Fdf5IVbLAnofwWpLpIwDQYJKoZIhvcNAQEL\nBQAwIzEhMB8GA1UEAwwYRm9yZ2Vyb2NrIENlcnQgQXV0aG9yaXR5MB4XDTIxMDYx\nMjE4MzQyOVoXDTIyMDYwMzE4MzQyOVowIzEhMB8GA1UEAwwYRm9yZ2Vyb2NrIENl\ncnQgQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nbi\nwe5wlxQ/ZDAoAnHSC3cFMggWPjtTdrl055nS/u5jlxCASd+4D8MoiyzajiZB+4/g\nAp2uzOhGjCyRkuX6THkTDWiFkLzdyoX+tTGFPDrXlxxFyxkR4EgYihVRkqJgSLDY\nLa6OwI9E8KyEyIjjkgQmBS05ot2HVKVYnCRShz6QtN1M0wtKvrHPgatBkiNnHDCS\nclvVvA/CHs+8aj4R9CfCBMMaUZYGZrBODjnB4n34yR1/JTaD861GDcZQcssc3pVe\nX/kuoeS+zZm7or3+AF1XeHFPpyIdBFiTfyz8UpFqpjYweNZIDWQ/IC6pjTBRFRiv\n6ia7Mo3RsM70TikazQIDAQABo1MwUTAdBgNVHQ4EFgQUPLHrZm3YGg/x48/+LxpS\nOWKsosgwHwYDVR0jBBgwFoAUPLHrZm3YGg/x48/+LxpSOWKsosgwDwYDVR0TAQH/\nBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAgap5LqZ9ctt/8CK3X0DwfXfS7CNz\n11zxCCnV4bIzX4NX/AmjyPT/uqsgArlLAe1Q6BEoyfKMGQQ0/5KtdNb2oBKXqaoO\nfL42E19N6pYAiUuDjkBG2lB0xJnE60wkL7FHox8vBMjXGI8GaVadwXOfv8pidJti\nxHC1oT9WE+C1j3v5DoG2+cIskxTBFVEIdoAk4+Ous1I2kPF4a96IWaIYOt8k2OD6\nLlDO0Gf8ra+uEz+4qBWVXslIy0gvV11BaDtU/htVTbOMT46apPmKQBsvORNtdwyu\nzXartkMRI0sJG0YsHKbJTnsqSq5I32YZdRW2d7y04xDxDRi4Pz/H4BwiHQ\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "description": "FAPI CIBA OP w/ MTLS Conformance for ForgeRock Identity Platform",
  "client2": {
    "client_id": "itssCibaClient4",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "p": "_-0wOGxFMnjxBs702FJLkEGmz-To8hIwExXE79iSU2Gh0B_abw3-Nng9ttF1xBtGmsorHL1nj-CHAohgKp0fBSr4ARFnn2Xe8MVacku3_weoU84U7nTcoapC3Gez3AxMoA-3nOTiBb9_mH-1sMO50nNRmspk3Roml16l2eyY0ic",
          "kty": "RSA",
          "q": "sD-grUUHskBE3DXwcKMGfjMpjQXd4mUL-1NFeVwlxdpZEY28O9TWb-0pD6DLjmBFwcH9A2k9lfoIKg8CSptROfvNn8rgH7hNObsUL9UnKst6vVZdmAAbkEII68U7-xuNk9lbRp4AUBIjL2vHJf21WQrqKx8yIxJVKO7kFlpu6qU",
          "d": "QVFX_UOanD4BJdkaoyDITamSGSHVksjzoRG-UuOccq7lE3J6oMjvaHu5E7lp0dQ_LjY8YlYMxOjG8IqturzyIYhlNCKYOrhMusB6i9p98prDQLWW1XMpPoJ2nMvhybBCtJ_tzPevIP_waOoB9dv9EUKm0o-pzWq0lvdZHyzacJgf5853pd2NwEwOhTwZoTY6G939I7EfyXQdcsxxsthF6o7fKaqmHyUqpLzDQOorF53Gqd6x3m8miFN01UdcaoQYEwBGsEDaCxXwk_wg4nx16WqWHCxyXDJ-eHjg9V8gj5KMf5AFPvZr_8WSqOcstqOqIXJR6UkKko99MM_1q-mjaQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "itssCibaClient4",
          "x5c": [
            "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\u003d\u003d"
          ],
          "qi": "nk7dK1j2CyrqK4RWBMmEUdDh8LtvYldsACPDjTWvG9UZ7eoUm-WqC0awZM6CVWFPjAVijspowOZpREDE_ewQ5XxErRWAGxJClpwpUH42BzL3iM12vfrk7mLqUKi0k9-QCS6LTeg3oEZNX6j2CHZhHXqcKiKBhSwk9bYFq-JMNug",
          "dp": "0Bzjwm4g0wtQDJZMuoApXFRWvuXJm9e4ajygmd2GF_HjsKfGa9p4J3kdzkWEO4Vmo8bUyhknVvNhNmkJsn10VTJ82_l4R0GCyk3h3-G87NEgS43grYwwQfJ_TlWyB7WkteAyEo55Ue1IaA0qBWUT_ZOy_2moHbf_O8ZGnfDs0K8",
          "alg": "PS256",
          "dq": "rUYwwoheM6mpyVGiTCqKpKHKFOISrZQoPnM0l0a3wBeVf4N37t6l364qszmjRhtyGTaNd8AMkxkY07ijyRN_vODI3HNI-wZnrf01sHz_n7witGhnZZudfareOGVVPd9txlBnwzptFktumh180eXnV146sCBgW0iXvsF2Ll_EMh0",
          "n": "sDKtJx7BsTWuKr3Hdcnlc3mrf94ZURbBCm-KM4wK0HBdmDRUCVo15uQwFfGJyUq1XsaGsRzqQDrLsmvnO0dQZJfZGjmOyBsjTMwDSoTkdPhGVyatU3GQ71vX0xiME4lQUBwuSeGMdPPYLbbsbl2UYwELRujajUQvmnagzWkwM5-dGiM33WEe6HUAnEoU-KYVQ6i-TEz-c6wIlRW2RxXIJi_cARU6GtP-lJoEaXClBI-5ztxUQi3LEhm34Q1Fum4ac5oeAVWl7vSUOwq9Yko8S4ooTO0pg_kOOQqwHzKE0LNlLDuEl6ugPqt1Im_n4GLGmeCOiRx5JYTc-kafMVkZIw"
        }
      ]
    },
    "acr_value": "poll"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\n9mJcpVy8kN+LaV1ItRjJraVI8ELw\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nfQJFQ4L1oUR1Z6WzqRD2j1o\u003d\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nzXartkMRI0sJG0YsHKbJTnsqSq5I32YZdRW2d7y04xDxDRi4Pz/H4BwiHQ\u003d\u003d\n-----END CERTIFICATE-----"
  }
}
testName
fapi-ciba-id1-discovery-end-point-verification
2021-06-15 10:29:42
GetDynamicServerConfiguration
HTTP request
request_uri
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-15 10:29:42 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "server": "nginx/1.19.2",
  "date": "Tue, 15 Jun 2021 10:29:42 GMT",
  "content-type": "application/json",
  "transfer-encoding": "chunked",
  "connection": "keep-alive",
  "vary": "Accept-Encoding",
  "strict-transport-security": "max-age\u003d15724800; includeSubDomains"
}
response_body
{"request_parameter_supported":true,"introspection_signing_alg_values_supported":["ES384","PS384","ES256","PS256","PS512","EdDSA","HS512","RS384","RS256","RS512","HS256","ES512","HS384"],"introspection_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES+A256KW","A128KW","A192KW","RSA-OAEP","ECDH-ES+A192KW","A256KW","ECDH-ES","ECDH-ES+A128KW","dir"],"claims_parameter_supported":false,"introspection_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/introspect","check_session_iframe":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/checkSession","scopes_supported":["openid"],"backchannel_logout_supported":false,"issuer":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll","id_token_encryption_enc_values_supported":["A256GCM","A128GCM","A256CBC-HS512","A128CBC-HS256","A192CBC-HS384","A192GCM"],"acr_values_supported":["poll"],"userinfo_encryption_enc_values_supported":["A256GCM","A128CBC-HS256","A192CBC-HS384","A192GCM","A128GCM","A256CBC-HS512"],"authorization_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/authorize","request_object_encryption_enc_values_supported":["A128GCM","A256GCM","A192CBC-HS384","A256CBC-HS512","A128CBC-HS256","A192GCM"],"introspection_encryption_enc_values_supported":["A128CBC-HS256","A192CBC-HS384","A256GCM","A256CBC-HS512","A128GCM","A192GCM"],"rcs_request_encryption_alg_values_supported":["dir","A192KW","RSA-OAEP-256","ECDH-ES+A256KW","RSA-OAEP","ECDH-ES","A256KW","A128KW","ECDH-ES+A128KW","ECDH-ES+A192KW"],"claims_supported":["zoneinfo","address","name","phone_number","given_name","locale","family_name","email"],"userinfo_signing_alg_values_supported":["ES256","HS512","ES512","HS384","RS256","ES384","HS256"],"rcs_request_signing_alg_values_supported":["RS512","PS384","PS256","HS256","HS384","ES512","RS256","RS384","HS512","ES384","ES256","PS512"],"token_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":false,"token_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/access_token","response_types_supported":["code token id_token","code","code id_token","device_code","id_token","code token","token","token id_token"],"revocation_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"request_uri_parameter_supported":true,"rcs_response_encryption_enc_values_supported":["A256CBC-HS512","A192CBC-HS384","A256GCM","A128GCM","A192GCM","A128CBC-HS256"],"userinfo_encryption_alg_values_supported":["RSA-OAEP","dir","A256KW","ECDH-ES+A256KW","ECDH-ES","RSA-OAEP-256","A128KW","ECDH-ES+A192KW","A192KW","ECDH-ES+A128KW"],"grant_types_supported":["implicit","refresh_token","password","client_credentials","urn:ietf:params:oauth:grant-type:device_code","authorization_code","urn:openid:params:grant-type:ciba","idm_delegation","urn:ietf:params:oauth:grant-type:jwt-bearer"],"end_session_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/endSession","rcs_request_encryption_enc_values_supported":["A256GCM","A256CBC-HS512","A192GCM","A128CBC-HS256","A128GCM","A192CBC-HS384"],"revocation_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/token/revoke","version":"3.0","rcs_response_encryption_alg_values_supported":["ECDH-ES+A256KW","dir","A256KW","ECDH-ES+A192KW","RSA-OAEP-256","ECDH-ES","ECDH-ES+A128KW","A128KW","A192KW","RSA-OAEP"],"userinfo_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/userinfo","token_endpoint_auth_signing_alg_values_supported":["RS512","RS384","RS256","ES512","HS256","HS384","PS512","ES384","PS256","ES256","HS512","PS384"],"require_request_uri_registration":true,"id_token_encryption_alg_values_supported":["A128KW","A192KW","ECDH-ES+A256KW","RSA-OAEP-256","RSA-OAEP","A256KW","ECDH-ES+A128KW","ECDH-ES+A192KW","ECDH-ES","dir"],"jwks_uri":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/jwk_uri","subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS384","RS256","PS512","ES512","HS384","HS256","PS256","ES256","PS384","ES384","RS512","HS512"],"registration_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/register","request_object_signing_alg_values_supported":["RS256","ES512","PS512","RS384","HS512","ES256","ES384","HS256","HS384","PS384","RS512","PS256"],"request_object_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES","ECDH-ES+A192KW","ECDH-ES+A128KW","A256KW","RSA-OAEP","dir","A128KW","ECDH-ES+A256KW","A192KW"],"rcs_response_signing_alg_values_supported":["PS256","ES384","RS512","ES256","HS512","PS384","RS256","ES512","PS512","HS384","HS256","RS384"],"backchannel_authentication_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/bc-authorize","backchannel_authentication_request_signing_alg_values_supported":["RS256","RS384","RS512","ES256","ES384","ES512","PS256","PS384","PS512"],"backchannel_token_delivery_modes_supported":["poll","ping"]}
2021-06-15 10:29:42
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{"request_parameter_supported":true,"introspection_signing_alg_values_supported":["ES384","PS384","ES256","PS256","PS512","EdDSA","HS512","RS384","RS256","RS512","HS256","ES512","HS384"],"introspection_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES+A256KW","A128KW","A192KW","RSA-OAEP","ECDH-ES+A192KW","A256KW","ECDH-ES","ECDH-ES+A128KW","dir"],"claims_parameter_supported":false,"introspection_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/introspect","check_session_iframe":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/checkSession","scopes_supported":["openid"],"backchannel_logout_supported":false,"issuer":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll","id_token_encryption_enc_values_supported":["A256GCM","A128GCM","A256CBC-HS512","A128CBC-HS256","A192CBC-HS384","A192GCM"],"acr_values_supported":["poll"],"userinfo_encryption_enc_values_supported":["A256GCM","A128CBC-HS256","A192CBC-HS384","A192GCM","A128GCM","A256CBC-HS512"],"authorization_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/authorize","request_object_encryption_enc_values_supported":["A128GCM","A256GCM","A192CBC-HS384","A256CBC-HS512","A128CBC-HS256","A192GCM"],"introspection_encryption_enc_values_supported":["A128CBC-HS256","A192CBC-HS384","A256GCM","A256CBC-HS512","A128GCM","A192GCM"],"rcs_request_encryption_alg_values_supported":["dir","A192KW","RSA-OAEP-256","ECDH-ES+A256KW","RSA-OAEP","ECDH-ES","A256KW","A128KW","ECDH-ES+A128KW","ECDH-ES+A192KW"],"claims_supported":["zoneinfo","address","name","phone_number","given_name","locale","family_name","email"],"userinfo_signing_alg_values_supported":["ES256","HS512","ES512","HS384","RS256","ES384","HS256"],"rcs_request_signing_alg_values_supported":["RS512","PS384","PS256","HS256","HS384","ES512","RS256","RS384","HS512","ES384","ES256","PS512"],"token_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":false,"token_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/access_token","response_types_supported":["code token id_token","code","code id_token","device_code","id_token","code token","token","token id_token"],"revocation_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"request_uri_parameter_supported":true,"rcs_response_encryption_enc_values_supported":["A256CBC-HS512","A192CBC-HS384","A256GCM","A128GCM","A192GCM","A128CBC-HS256"],"userinfo_encryption_alg_values_supported":["RSA-OAEP","dir","A256KW","ECDH-ES+A256KW","ECDH-ES","RSA-OAEP-256","A128KW","ECDH-ES+A192KW","A192KW","ECDH-ES+A128KW"],"grant_types_supported":["implicit","refresh_token","password","client_credentials","urn:ietf:params:oauth:grant-type:device_code","authorization_code","urn:openid:params:grant-type:ciba","idm_delegation","urn:ietf:params:oauth:grant-type:jwt-bearer"],"end_session_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/endSession","rcs_request_encryption_enc_values_supported":["A256GCM","A256CBC-HS512","A192GCM","A128CBC-HS256","A128GCM","A192CBC-HS384"],"revocation_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/token/revoke","version":"3.0","rcs_response_encryption_alg_values_supported":["ECDH-ES+A256KW","dir","A256KW","ECDH-ES+A192KW","RSA-OAEP-256","ECDH-ES","ECDH-ES+A128KW","A128KW","A192KW","RSA-OAEP"],"userinfo_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/userinfo","token_endpoint_auth_signing_alg_values_supported":["RS512","RS384","RS256","ES512","HS256","HS384","PS512","ES384","PS256","ES256","HS512","PS384"],"require_request_uri_registration":true,"id_token_encryption_alg_values_supported":["A128KW","A192KW","ECDH-ES+A256KW","RSA-OAEP-256","RSA-OAEP","A256KW","ECDH-ES+A128KW","ECDH-ES+A192KW","ECDH-ES","dir"],"jwks_uri":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/jwk_uri","subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS384","RS256","PS512","ES512","HS384","HS256","PS256","ES256","PS384","ES384","RS512","HS512"],"registration_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/register","request_object_signing_alg_values_supported":["RS256","ES512","PS512","RS384","HS512","ES256","ES384","HS256","HS384","PS384","RS512","PS256"],"request_object_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES","ECDH-ES+A192KW","ECDH-ES+A128KW","A256KW","RSA-OAEP","dir","A128KW","ECDH-ES+A256KW","A192KW"],"rcs_response_signing_alg_values_supported":["PS256","ES384","RS512","ES256","HS512","PS384","RS256","ES512","PS512","HS384","HS256","RS384"],"backchannel_authentication_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/bc-authorize","backchannel_authentication_request_signing_alg_values_supported":["RS256","RS384","RS512","ES256","ES384","ES512","PS256","PS384","PS512"],"backchannel_token_delivery_modes_supported":["poll","ping"]}
2021-06-15 10:29:42 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
request_parameter_supported
true
introspection_signing_alg_values_supported
[
  "ES384",
  "PS384",
  "ES256",
  "PS256",
  "PS512",
  "EdDSA",
  "HS512",
  "RS384",
  "RS256",
  "RS512",
  "HS256",
  "ES512",
  "HS384"
]
introspection_encryption_alg_values_supported
[
  "RSA-OAEP-256",
  "ECDH-ES+A256KW",
  "A128KW",
  "A192KW",
  "RSA-OAEP",
  "ECDH-ES+A192KW",
  "A256KW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "dir"
]
claims_parameter_supported
false
introspection_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/introspect
check_session_iframe
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/checkSession
scopes_supported
[
  "openid"
]
backchannel_logout_supported
false
issuer
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll
id_token_encryption_enc_values_supported
[
  "A256GCM",
  "A128GCM",
  "A256CBC-HS512",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A192GCM"
]
acr_values_supported
[
  "poll"
]
userinfo_encryption_enc_values_supported
[
  "A256GCM",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A192GCM",
  "A128GCM",
  "A256CBC-HS512"
]
authorization_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/authorize
request_object_encryption_enc_values_supported
[
  "A128GCM",
  "A256GCM",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128CBC-HS256",
  "A192GCM"
]
introspection_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256GCM",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM"
]
rcs_request_encryption_alg_values_supported
[
  "dir",
  "A192KW",
  "RSA-OAEP-256",
  "ECDH-ES+A256KW",
  "RSA-OAEP",
  "ECDH-ES",
  "A256KW",
  "A128KW",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW"
]
claims_supported
[
  "zoneinfo",
  "address",
  "name",
  "phone_number",
  "given_name",
  "locale",
  "family_name",
  "email"
]
userinfo_signing_alg_values_supported
[
  "ES256",
  "HS512",
  "ES512",
  "HS384",
  "RS256",
  "ES384",
  "HS256"
]
rcs_request_signing_alg_values_supported
[
  "RS512",
  "PS384",
  "PS256",
  "HS256",
  "HS384",
  "ES512",
  "RS256",
  "RS384",
  "HS512",
  "ES384",
  "ES256",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_post",
  "private_key_jwt",
  "self_signed_tls_client_auth",
  "tls_client_auth",
  "none",
  "client_secret_basic"
]
tls_client_certificate_bound_access_tokens
true
backchannel_logout_session_supported
false
token_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/access_token
response_types_supported
[
  "code token id_token",
  "code",
  "code id_token",
  "device_code",
  "id_token",
  "code token",
  "token",
  "token id_token"
]
revocation_endpoint_auth_methods_supported
[
  "client_secret_post",
  "private_key_jwt",
  "self_signed_tls_client_auth",
  "tls_client_auth",
  "none",
  "client_secret_basic"
]
request_uri_parameter_supported
true
rcs_response_encryption_enc_values_supported
[
  "A256CBC-HS512",
  "A192CBC-HS384",
  "A256GCM",
  "A128GCM",
  "A192GCM",
  "A128CBC-HS256"
]
userinfo_encryption_alg_values_supported
[
  "RSA-OAEP",
  "dir",
  "A256KW",
  "ECDH-ES+A256KW",
  "ECDH-ES",
  "RSA-OAEP-256",
  "A128KW",
  "ECDH-ES+A192KW",
  "A192KW",
  "ECDH-ES+A128KW"
]
grant_types_supported
[
  "implicit",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:ietf:params:oauth:grant-type:device_code",
  "authorization_code",
  "urn:openid:params:grant-type:ciba",
  "idm_delegation",
  "urn:ietf:params:oauth:grant-type:jwt-bearer"
]
end_session_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/endSession
rcs_request_encryption_enc_values_supported
[
  "A256GCM",
  "A256CBC-HS512",
  "A192GCM",
  "A128CBC-HS256",
  "A128GCM",
  "A192CBC-HS384"
]
revocation_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/token/revoke
version
3.0
rcs_response_encryption_alg_values_supported
[
  "ECDH-ES+A256KW",
  "dir",
  "A256KW",
  "ECDH-ES+A192KW",
  "RSA-OAEP-256",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "A128KW",
  "A192KW",
  "RSA-OAEP"
]
userinfo_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/userinfo
token_endpoint_auth_signing_alg_values_supported
[
  "RS512",
  "RS384",
  "RS256",
  "ES512",
  "HS256",
  "HS384",
  "PS512",
  "ES384",
  "PS256",
  "ES256",
  "HS512",
  "PS384"
]
require_request_uri_registration
true
id_token_encryption_alg_values_supported
[
  "A128KW",
  "A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP-256",
  "RSA-OAEP",
  "A256KW",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES",
  "dir"
]
jwks_uri
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/jwk_uri
subject_types_supported
[
  "public"
]
id_token_signing_alg_values_supported
[
  "RS384",
  "RS256",
  "PS512",
  "ES512",
  "HS384",
  "HS256",
  "PS256",
  "ES256",
  "PS384",
  "ES384",
  "RS512",
  "HS512"
]
registration_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/register
request_object_signing_alg_values_supported
[
  "RS256",
  "ES512",
  "PS512",
  "RS384",
  "HS512",
  "ES256",
  "ES384",
  "HS256",
  "HS384",
  "PS384",
  "RS512",
  "PS256"
]
request_object_encryption_alg_values_supported
[
  "RSA-OAEP-256",
  "ECDH-ES",
  "ECDH-ES+A192KW",
  "ECDH-ES+A128KW",
  "A256KW",
  "RSA-OAEP",
  "dir",
  "A128KW",
  "ECDH-ES+A256KW",
  "A192KW"
]
rcs_response_signing_alg_values_supported
[
  "PS256",
  "ES384",
  "RS512",
  "ES256",
  "HS512",
  "PS384",
  "RS256",
  "ES512",
  "PS512",
  "HS384",
  "HS256",
  "RS384"
]
backchannel_authentication_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/bc-authorize
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
2021-06-15 10:29:42 SUCCESS
EnsureDiscoveryEndpointResponseStatusCodeIs200
discovery_endpoint_response returned http 200 as expected
http_status
200
2021-06-15 10:29:42 SUCCESS
CheckDiscoveryEndpointReturnedJsonContentType
discovery_endpoint_response Content-Type: header is application/json
2021-06-15 10:29:42 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "request_parameter_supported": true,
  "introspection_signing_alg_values_supported": [
    "ES384",
    "PS384",
    "ES256",
    "PS256",
    "PS512",
    "EdDSA",
    "HS512",
    "RS384",
    "RS256",
    "RS512",
    "HS256",
    "ES512",
    "HS384"
  ],
  "introspection_encryption_alg_values_supported": [
    "RSA-OAEP-256",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "RSA-OAEP",
    "ECDH-ES+A192KW",
    "A256KW",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "dir"
  ],
  "claims_parameter_supported": false,
  "introspection_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/introspect",
  "check_session_iframe": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/checkSession",
  "scopes_supported": [
    "openid"
  ],
  "backchannel_logout_supported": false,
  "issuer": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll",
  "id_token_encryption_enc_values_supported": [
    "A256GCM",
    "A128GCM",
    "A256CBC-HS512",
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A192GCM"
  ],
  "acr_values_supported": [
    "poll"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A256GCM",
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A192GCM",
    "A128GCM",
    "A256CBC-HS512"
  ],
  "authorization_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/authorize",
  "request_object_encryption_enc_values_supported": [
    "A128GCM",
    "A256GCM",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128CBC-HS256",
    "A192GCM"
  ],
  "introspection_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256GCM",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM"
  ],
  "rcs_request_encryption_alg_values_supported": [
    "dir",
    "A192KW",
    "RSA-OAEP-256",
    "ECDH-ES+A256KW",
    "RSA-OAEP",
    "ECDH-ES",
    "A256KW",
    "A128KW",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW"
  ],
  "claims_supported": [
    "zoneinfo",
    "address",
    "name",
    "phone_number",
    "given_name",
    "locale",
    "family_name",
    "email"
  ],
  "userinfo_signing_alg_values_supported": [
    "ES256",
    "HS512",
    "ES512",
    "HS384",
    "RS256",
    "ES384",
    "HS256"
  ],
  "rcs_request_signing_alg_values_supported": [
    "RS512",
    "PS384",
    "PS256",
    "HS256",
    "HS384",
    "ES512",
    "RS256",
    "RS384",
    "HS512",
    "ES384",
    "ES256",
    "PS512"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_post",
    "private_key_jwt",
    "self_signed_tls_client_auth",
    "tls_client_auth",
    "none",
    "client_secret_basic"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_logout_session_supported": false,
  "token_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/access_token",
  "response_types_supported": [
    "code token id_token",
    "code",
    "code id_token",
    "device_code",
    "id_token",
    "code token",
    "token",
    "token id_token"
  ],
  "revocation_endpoint_auth_methods_supported": [
    "client_secret_post",
    "private_key_jwt",
    "self_signed_tls_client_auth",
    "tls_client_auth",
    "none",
    "client_secret_basic"
  ],
  "request_uri_parameter_supported": true,
  "rcs_response_encryption_enc_values_supported": [
    "A256CBC-HS512",
    "A192CBC-HS384",
    "A256GCM",
    "A128GCM",
    "A192GCM",
    "A128CBC-HS256"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA-OAEP",
    "dir",
    "A256KW",
    "ECDH-ES+A256KW",
    "ECDH-ES",
    "RSA-OAEP-256",
    "A128KW",
    "ECDH-ES+A192KW",
    "A192KW",
    "ECDH-ES+A128KW"
  ],
  "grant_types_supported": [
    "implicit",
    "refresh_token",
    "password",
    "client_credentials",
    "urn:ietf:params:oauth:grant-type:device_code",
    "authorization_code",
    "urn:openid:params:grant-type:ciba",
    "idm_delegation",
    "urn:ietf:params:oauth:grant-type:jwt-bearer"
  ],
  "end_session_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/endSession",
  "rcs_request_encryption_enc_values_supported": [
    "A256GCM",
    "A256CBC-HS512",
    "A192GCM",
    "A128CBC-HS256",
    "A128GCM",
    "A192CBC-HS384"
  ],
  "revocation_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/token/revoke",
  "version": "3.0",
  "rcs_response_encryption_alg_values_supported": [
    "ECDH-ES+A256KW",
    "dir",
    "A256KW",
    "ECDH-ES+A192KW",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "A128KW",
    "A192KW",
    "RSA-OAEP"
  ],
  "userinfo_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/userinfo",
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS512",
    "RS384",
    "RS256",
    "ES512",
    "HS256",
    "HS384",
    "PS512",
    "ES384",
    "PS256",
    "ES256",
    "HS512",
    "PS384"
  ],
  "require_request_uri_registration": true,
  "id_token_encryption_alg_values_supported": [
    "A128KW",
    "A192KW",
    "ECDH-ES+A256KW",
    "RSA-OAEP-256",
    "RSA-OAEP",
    "A256KW",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES",
    "dir"
  ],
  "jwks_uri": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/jwk_uri",
  "subject_types_supported": [
    "public"
  ],
  "id_token_signing_alg_values_supported": [
    "RS384",
    "RS256",
    "PS512",
    "ES512",
    "HS384",
    "HS256",
    "PS256",
    "ES256",
    "PS384",
    "ES384",
    "RS512",
    "HS512"
  ],
  "registration_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/register",
  "request_object_signing_alg_values_supported": [
    "RS256",
    "ES512",
    "PS512",
    "RS384",
    "HS512",
    "ES256",
    "ES384",
    "HS256",
    "HS384",
    "PS384",
    "RS512",
    "PS256"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A192KW",
    "ECDH-ES+A128KW",
    "A256KW",
    "RSA-OAEP",
    "dir",
    "A128KW",
    "ECDH-ES+A256KW",
    "A192KW"
  ],
  "rcs_response_signing_alg_values_supported": [
    "PS256",
    "ES384",
    "RS512",
    "ES256",
    "HS512",
    "PS384",
    "RS256",
    "ES512",
    "PS512",
    "HS384",
    "HS256",
    "RS384"
  ],
  "backchannel_authentication_endpoint": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/bc-authorize",
  "backchannel_authentication_request_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "backchannel_token_delivery_modes_supported": [
    "poll",
    "ping"
  ]
}
2021-06-15 10:29:42
fapi-ciba-id1-discovery-end-point-verification
Setup Done
2021-06-15 10:29:42 SUCCESS
CheckDiscEndpointDiscoveryUrl
discoveryUrl
actual
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/.well-known/openid-configuration
2021-06-15 10:29:42 SUCCESS
CheckDiscEndpointIssuer
issuer is consistent with the discovery endpoint
2021-06-15 10:29:42 SUCCESS
FAPIRWCheckTLSClientCertificateBoundAccessTokens
tls_client_certificate_bound_access_tokens was 'true'
2021-06-15 10:29:42 SUCCESS
CheckDiscEndpointIdTokenSigningAlgValuesSupported
Contents of 'id_token_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS384",
  "RS256",
  "PS512",
  "ES512",
  "HS384",
  "HS256",
  "PS256",
  "ES256",
  "PS384",
  "ES384",
  "RS512",
  "HS512"
]
expected
[
  "PS256",
  "ES256"
]
minimum_matches_required
1
2021-06-15 10:29:42 SUCCESS
FAPIRWCheckDiscEndpointTokenEndpointAuthMethodsSupported
Contents of 'token_endpoint_auth_methods_supported' in discovery document matches expectations.
actual
[
  "client_secret_post",
  "private_key_jwt",
  "self_signed_tls_client_auth",
  "tls_client_auth",
  "none",
  "client_secret_basic"
]
expected
[
  "private_key_jwt",
  "tls_client_auth"
]
minimum_matches_required
1
2021-06-15 10:29:42 SUCCESS
CheckDiscEndpointTokenEndpointAuthSigningAlgValuesSupported
Contents of 'token_endpoint_auth_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS512",
  "RS384",
  "RS256",
  "ES512",
  "HS256",
  "HS384",
  "PS512",
  "ES384",
  "PS256",
  "ES256",
  "HS512",
  "PS384"
]
expected
[
  "PS256",
  "ES256"
]
minimum_matches_required
1
2021-06-15 10:29:42 SUCCESS
FAPICheckDiscEndpointUserinfoSigningAlgValuesSupported
Contents of 'userinfo_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "ES256",
  "HS512",
  "ES512",
  "HS384",
  "RS256",
  "ES384",
  "HS256"
]
expected
[
  "PS256",
  "ES256"
]
minimum_matches_required
1
2021-06-15 10:29:42 SUCCESS
CheckDiscEndpointTokenEndpoint
token_endpoint
actual
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/access_token
2021-06-15 10:29:42 SUCCESS
CheckDiscEndpointRegistrationEndpoint
registration_endpoint
actual
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/register
2021-06-15 10:29:42 SUCCESS
CheckJwksUri
jwks_uri
actual
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/connect/jwk_uri
2021-06-15 10:29:42 SUCCESS
EnsureServerConfigurationSupportsMTLS
Found supported MTLS method
method
self_signed_tls_client_auth
2021-06-15 10:29:42 SUCCESS
EnsureServerConfigurationSupportsMTLS
Found supported MTLS method
method
tls_client_auth
2021-06-15 10:29:42 SUCCESS
CheckDiscBackchannelAuthorizationEndpoint
backchannel_authentication_endpoint
actual
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/ciba-poll/bc-authorize
2021-06-15 10:29:42 SUCCESS
CheckDiscEndpointBackchannelAuthenticationRequestSigningAlgValuesSupported
Contents of 'backchannel_authentication_request_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
expected
[
  "PS256",
  "ES256"
]
minimum_matches_required
1
2021-06-15 10:29:42 SUCCESS
CheckBackchannelUserCodeParameterSupported
backchannel_user_code_parameter_supported is not present
2021-06-15 10:29:42 SUCCESS
FAPICIBACheckDiscEndpointGrantTypesSupported
Contents of 'grant_types_supported' in discovery document matches expectations.
actual
[
  "implicit",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:ietf:params:oauth:grant-type:device_code",
  "authorization_code",
  "urn:openid:params:grant-type:ciba",
  "idm_delegation",
  "urn:ietf:params:oauth:grant-type:jwt-bearer"
]
expected
[
  "urn:openid:params:grant-type:ciba"
]
minimum_matches_required
1
2021-06-15 10:29:42 SUCCESS
CheckBackchannelTokenDeliveryPollModeSupported
Contents of 'backchannel_token_delivery_modes_supported' in discovery document matches expectations.
actual
[
  "poll",
  "ping"
]
expected
[
  "poll"
]
minimum_matches_required
1
2021-06-15 10:29:43 FINISHED
fapi-ciba-id1-discovery-end-point-verification
Test has run to completion
testmodule_result
PASSED
2021-06-15 10:29:49
TEST-RUNNER
Alias has now been claimed by another test
alias
ForgeRockAM
new_test_id
wyySqDzHFCgSsjx
Test Results