Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-01-21 15:27:39 INFO
TEST-RUNNER
Test instance yHHyTYYOq5xOaZU created
baseUrl
https://www.certification.openid.net/test/a/roboot-fapi-ciba-poll-mtls-v1-final
variant
{
  "client_auth_type": "mtls",
  "ciba_mode": "poll",
  "fapi_profile": "plain_fapi",
  "client_registration": "static_client"
}
alias
roboot-fapi-ciba-poll-mtls-v1-final
description
FAPI CIBA MTLS Poll
planId
xPBU37aQKJBbJ
config
{
  "alias": "roboot-fapi-ciba-poll-mtls-v1-final",
  "description": "FAPI CIBA MTLS Poll",
  "server": {
    "discoveryUrl": "https://emea-conformance.ping-eng.com:9031/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "conformance1",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "d": "QPg1PBy12DhqqGeiuWBoIdhrfbOutP8nfSND46mdTgU",
          "use": "sig",
          "crv": "P-256",
          "kid": "2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew",
          "x": "NK3-2enqupOW-PGDSp2X2vrtqFIVnsVMciZdVwa7p8Q",
          "y": "Yrp1yMUYXZcWbHRzsXlH94v2SJZs0lxRbbCpvo1kcUw",
          "alg": "ES256"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "patrick"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIIDkTCCAnmgAwIBAgIJAOLiBx6+gpncMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNV\nBAYTAkdCMRIwEAYDVQQIDAlNaWRkbGVzZXgxDzANBgNVBAcMBkxvbmRvbjEWMBQG\nA1UECgwNUGluZyBJZGVudGl0eTEMMAoGA1UECwwDUlNBMRgwFgYDVQQDDA9QaW5n\nIFVLIERlbW8gQ0EwHhcNMjAwOTIzMTQwNjU0WhcNMjIwMjA1MTQwNjU0WjBaMSQw\nIgYDVQQDDBttdGxzLXBvbGwtZmFwaS1jaWJhLWNsaWVudDExDTALBgNVBAsMBERl\nbW8xFjAUBgNVBAoMDVBpbmcgSWRlbnRpdHkxCzAJBgNVBAYTAkdCMIIBIjANBgkq\nhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqADFJnt3i/xbJupaTpc4P8oYrZINQ07z\nEhdf8Osr/+XGp/az202QtoMFyRqNcYZS9/U0ce+Vz/pcaleqUlaAVfgW2o3Dp4z1\nd8WjDDar86agcqwl+aI2rhKh3aQIEiOwHmaPvYlRmWZTotMdyxUvJLlMJq+m4fZ3\n3nphW9gT+AhEM+fyegVPX+jgj8dk6CaqCcRr7050irHOWfotCZxq79PBCFi8NOKj\nBn/uHPibKVN+PGgptqPmkdGFrkg1+gnWjmtxROJlCjNgrRJxmgD3/DbvqvTen/aL\n42+JJRGA8dXwCYTgjhvdTrE9OlBiIPB+EAlYxk6g+3kMqg+cJ5WP1QIDAQABo0Iw\nQDAJBgNVHRMEAjAAMAsGA1UdDwQEAwIF4DAmBgNVHREEHzAdghttdGxzLXBvbGwt\nZmFwaS1jaWJhLWNsaWVudDEwDQYJKoZIhvcNAQELBQADggEBACZ7/UyxTg6hsUEm\nIjJKln/USY5sLq6MsrQgaqDwNuJ2BAyyrbIhldbNKBvC+swQjfbnisVYEKmmCAAB\nPhV58U2YaEHOxfjzmfQ55duco0P4HulMhOvA/0jd+e0GFLF7eusEE4dw/RmiYjxN\nUpDjF9IgybjQkYPXLw+hfyhGsoKW38H1+x6ha7VTyJKp5W9AVj8/00vNswwvv3Xj\ns7C2mlogCEPFLPjc7jEQ4BRzkqBqQyi6MlNdgva3C6jDkSnXksdI9dZkrb4gNhus\nexwkbHkyet+unXxur9evqIISJsxELCMTxMocE++7XMJsPUT5FnomlXRK0jRztTmF\nG9y5Fqs\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\nZqGxA6UIIzOV0LbnnpFhYNgmH0AJS17V9sIIGtYXNArjzw4Kin4P\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\n/Eat5g\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "client2": {
    "client_id": "conformance2",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "d": "MTbmR5F_tN0zlvVrwESkMNHB-ZLoRpk3dlxHYged3Ik",
          "use": "sig",
          "crv": "P-256",
          "kid": "6waBCAJKuKMvSU3k540XHPx_4gJx01tmQh8giaYjj1k",
          "x": "XW7xFTCnyPLhhWb_dE0fIIavYTbilf3HDsUELAC5SwI",
          "y": "sm9SrdwPWJ_oQ5tbsDMi6xnsaoLWZLTFyy0L2q5vURE",
          "alg": "ES256"
        }
      ]
    },
    "acr_value": "high"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nvmmVwUw\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\n6M0VjCsshxg+dh8CEfrMAeZ36SXKIqdjXfLQ8yeeQF+fJNHzeXPB\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----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\n/Eat5g\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://emea-conformance.ping-eng.com:3000/get"
  }
}
testName
fapi-ciba-id1-discovery-end-point-verification
2021-01-21 15:27:39
GetDynamicServerConfiguration
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9031/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-01-21 15:27:40 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 21 Jan 2021 15:27:40 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dZC2roszLvZxSqGc4KqMs7O;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "content-length": "3631"
}
response_body
{
  "issuer": "https://emea-conformance.ping-eng.com:9031",
  "authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://emea-conformance.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://emea-conformance.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://emea-conformance.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://emea-conformance.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "test", "openid" ],
  "claims_supported": [ "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
    "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "private_key_jwt" , "tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "plain", "S256" ],
  "tls_client_certificate_bound_access_tokens": true,
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"}
}
2021-01-21 15:27:40
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://emea-conformance.ping-eng.com:9031",
  "authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://emea-conformance.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://emea-conformance.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://emea-conformance.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://emea-conformance.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "test", "openid" ],
  "claims_supported": [ "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
    "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "private_key_jwt" , "tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "plain", "S256" ],
  "tls_client_certificate_bound_access_tokens": true,
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"}
}
2021-01-21 15:27:40 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://emea-conformance.ping-eng.com:9031
authorization_endpoint
https://emea-conformance.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://emea-conformance.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://emea-conformance.ping-eng.com:9031/as/revoke_token.oauth2
userinfo_endpoint
https://emea-conformance.ping-eng.com:9031/idp/userinfo.openid
introspection_endpoint
https://emea-conformance.ping-eng.com:9031/as/introspect.oauth2
jwks_uri
https://emea-conformance.ping-eng.com:9031/pf/JWKS
registration_endpoint
https://emea-conformance.ping-eng.com:9031/as/clients.oauth2
ping_revoked_sris_endpoint
https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions
ping_end_session_endpoint
https://emea-conformance.ping-eng.com:9031/idp/startSLO.ping
device_authorization_endpoint
https://emea-conformance.ping-eng.com:9031/as/device_authz.oauth2
scopes_supported
[
  "test",
  "openid"
]
claims_supported
[
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
false
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
backchannel_authentication_endpoint
https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
code_challenge_methods_supported
[
  "plain",
  "S256"
]
tls_client_certificate_bound_access_tokens
true
mtls_endpoint_aliases
{
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"
}
2021-01-21 15:27:40 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
mtls_endpoint_aliases
{
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"
}
2021-01-21 15:27:40
fapi-ciba-id1-discovery-end-point-verification
Setup Done
2021-01-21 15:27:40 SUCCESS
CheckDiscEndpointDiscoveryUrl
discoveryUrl
actual
https://emea-conformance.ping-eng.com:9031/.well-known/openid-configuration
2021-01-21 15:27:40 SUCCESS
CheckDiscEndpointIssuer
issuer is consistent with the discovery endpoint
2021-01-21 15:27:40 SUCCESS
FAPIRWCheckTLSClientCertificateBoundAccessTokens
tls_client_certificate_bound_access_tokens was 'true'
2021-01-21 15:27:40 SUCCESS
CheckDiscEndpointIdTokenSigningAlgValuesSupported
Contents of 'id_token_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
expected
[
  "PS256",
  "ES256"
]
minimum_matches_required
1
2021-01-21 15:27:40 SUCCESS
FAPIRWCheckDiscEndpointTokenEndpointAuthMethodsSupported
Contents of 'token_endpoint_auth_methods_supported' in discovery document matches expectations.
actual
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
expected
[
  "private_key_jwt",
  "tls_client_auth"
]
minimum_matches_required
1
2021-01-21 15:27:40 SUCCESS
CheckDiscEndpointTokenEndpointAuthSigningAlgValuesSupported
Contents of 'token_endpoint_auth_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
expected
[
  "PS256",
  "ES256"
]
minimum_matches_required
1
2021-01-21 15:27:40 INFO
FAPICheckDiscEndpointUserinfoSigningAlgValuesSupported
Skipped evaluation due to missing required element: server userinfo_signing_alg_values_supported
path
userinfo_signing_alg_values_supported
mapped
object
server
2021-01-21 15:27:40 SUCCESS
CheckDiscEndpointTokenEndpoint
token_endpoint
actual
https://emea-conformance.ping-eng.com:9032/as/token.oauth2
2021-01-21 15:27:40 SUCCESS
CheckDiscEndpointRegistrationEndpoint
registration_endpoint
actual
https://emea-conformance.ping-eng.com:9031/as/clients.oauth2
2021-01-21 15:27:40 SUCCESS
CheckJwksUri
jwks_uri
actual
https://emea-conformance.ping-eng.com:9031/pf/JWKS
2021-01-21 15:27:40 SUCCESS
EnsureServerConfigurationSupportsMTLS
Found supported MTLS method
method
tls_client_auth
2021-01-21 15:27:40 SUCCESS
CheckDiscBackchannelAuthorizationEndpoint
backchannel_authentication_endpoint
actual
https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba
2021-01-21 15:27:40 SUCCESS
CheckDiscEndpointBackchannelAuthenticationRequestSigningAlgValuesSupported
Contents of 'backchannel_authentication_request_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
expected
[
  "PS256",
  "ES256"
]
minimum_matches_required
1
2021-01-21 15:27:40 SUCCESS
CheckBackchannelUserCodeParameterSupported
backchannel_user_code_parameter_supported is a valid boolean
2021-01-21 15:27:40 SUCCESS
FAPICIBACheckDiscEndpointGrantTypesSupported
Contents of 'grant_types_supported' in discovery document matches expectations.
actual
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
expected
[
  "urn:openid:params:grant-type:ciba"
]
minimum_matches_required
1
2021-01-21 15:27:40 SUCCESS
CheckBackchannelTokenDeliveryPollModeSupported
Contents of 'backchannel_token_delivery_modes_supported' in discovery document matches expectations.
actual
[
  "poll",
  "ping"
]
expected
[
  "poll"
]
minimum_matches_required
1
2021-01-21 15:27:40 FINISHED
fapi-ciba-id1-discovery-end-point-verification
Test has run to completion
testmodule_result
PASSED
2021-01-21 15:27:53
TEST-RUNNER
Alias has now been claimed by another test
alias
roboot-fapi-ciba-poll-mtls-v1-final
new_test_id
jzMYCQv135Ngjg0
Test Results