Score:0

IAP with Google Identity Platform throws "Failed to fetch the discovery document from issuer"

in flag

I have activated Identity Aware Proxy on a GCP Load Balancer and configured it to authenticate the users against my OIDC Identity Provider (Auth0) through Google Identity Platform with a default login page hosted on Cloud Run.

When I browse my application I got redirected to the login page but then this happens:

Failed to fetch the discovery document from issuer

although the document is available and publicly reachable at that URL:

Auth0 discovery document

I followed GCP documentation step by step and cannot find any troubleshooting guide. Any thoughts?

Thanks

John Hanley avatar
cn flag
The OpenID Connect Metadata Document is public information. There is no need to mask that information. By hiding that information, we cannot run tests for you.
in flag
Hi John, I know it's public but I hope you appreciate I need to redact my Company's name.
Score:0
in flag

Ok, solved.

The problem was I had configured my Google Identity Platform OIDC Provider with the full metadata document URL

wrong URL

while only the issuer base URL was expected

right URL

Newbie mistake, I know, but the error message is misleading, IMO, because it reports the URL where the document actually is. If the returned message had been

Failed to fetch the discovery document from issuer: https://REDACTED.eu.auth0.com/.well-known/openid-configuration/.well-known/openid-configuration

the misconfiguration would have been immediately apparent.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.