Include an Upstream 'Nonce' Parameter with OIDC Connections

Knowledge Articles
,
1

Overview

An external identity provider may require an upstream nonce parameter to be sent in the request to the authorization endpoint from an OIDC connection in Auth0.

Applies To

  • OIDC Enterprise Connections

Cause

If a nonce parameter appears to be missing, it is likely because the OIDC connection is set to ‘Back Channel’.

Solution

At the moment, a nonce is not included as an upstream parameter for OIDC connections set to ‘Back Channel’. The only way to include a nonce is to use the Front Channel setting.

Edit Solution