FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    I want to login with intuit using OIDC but can't.

    Scheduled Pinned Locked Moved Solved
    Q&A
    1
    2
    580
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • danD
      dan
      last edited by dan

      The log tells me:

      Request to the [https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer] endpoint failed. Status code [401]
      
      Error response is 
      {
        "error" : "invalid_client"
      }
      

      Originally from https://github.com/FusionAuth/fusionauth-issues/issues/663

      --
      FusionAuth - Auth for devs, built by devs.
      https://fusionauth.io

      1 Reply Last reply Reply Quote 0
      • danD
        dan
        last edited by

        You can double check the client id and secret are correct and don't have any trailing white space when entered in the FusionAuth config.

        The scope you have configured does not show up in the discovery document but I would assume you'd receive a different error I'd that was a problem.

        Confirm you registered the correct redirect_uri (something like http://localhost:9011/oauth2/callback) in your Intuit account.

        Their APIs don't seem to be working well with the client_secret_basic authentication method.

        Their discovery document indicates they support both client_secret_post and client_secret_basic.

        "token_endpoint_auth_methods_supported":[  
              "client_secret_post",
              "client_secret_basic"
           ]
        

        The default OpenID Connect config in FusionAuth will use client_secret_basic.

        I found a thread indicating others are also having problems with the Basic Authorization strategy.
        https://help.developer.intuit.com/s/question/0D50f000050TBnCCAW/getting-the-errorinvalidclient-for-access-tokens

        Switching the configuration to use client_secret_post seems to have allowed an authentication request.

        --
        FusionAuth - Auth for devs, built by devs.
        https://fusionauth.io

        1 Reply Last reply Reply Quote 0
        • First post
          Last post