正在使用.NET core IDX20803与OKTA进行身份验证：无法从“[PII已隐藏]”获取配置

Question

services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = OktaDefaults.MvcAuthenticationScheme;
            })
            .AddCookie()
            .AddOktaMvc(new OktaMvcOptions
            {
                OktaDomain = "https://domain.oktapreview.com",
                ClientId = "xxxxxxxxxxxxxxxxxxx",
                ClientSecret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
            });

 public void Configure(IApplicationBuilder app, IHostingEnvironment env)
        {
            app.UseAuthentication();
            app.UseMvc();
}

System.InvalidOperationException: IDX20803: Unable to obtain configuration from: '[PII is hidden]'.

{"errorCode":"E0000006","errorSummary":"You do not have permission to perform the requested action","errorLink":"E0000006","errorId":"oaeX0BPGXjlQ4qE1emo_gDk4w","errorCauses":[]}

我不知道我应该如何与OKTA进行身份验证，OKTA如何知道哪个用户正在尝试进行身份验证？

Answer 1

尝试以下操作：将OKTAMVCoptions.AuthorizationServerID设置为空字符串

 .AddOktaMvc(new OktaMvcOptions
            {
                OktaDomain = "https://domain.oktapreview.com",
                ClientId = "xxxxxxxxxxxxxxxxxxx",
                ClientSecret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
                AuthorizationServerId = String.Empty
            });,

在连接到我的okta开发人员帐户时我不需要这样做，但是在切换到生产帐户时我需要这样做。

如果这没有帮助，请设置IdentityModelEventSource.showpii以提供更详细的错误消息：

    public void ConfigureServices(IServiceCollection services)
    {
        IdentityModelEventSource.ShowPII = true;
        ....