Question

OAuth 2.0 - Integration Setup error

Hi Team, I am trying to integrate my application with Creatio OAuth 2.0 using( Grant type - authorization code). 

I created a URL with right client_id and redirect_uri 

https://xxxx-demo.creatio.com/0/connect/authorize?client_id=xxxxxx&redirect_uri=https://my_redirect_uri&response_type=code&scope=Test&state=1a4741d705c02f0c8f6e00d68e38ec7f

 

When I click the above link, it takes uses to username/password page, then to consent page. Once the user accepts the consent page info, it gives the below error, "Integration setup error"(See screenshot).

 

One thing that's not clear is scope. I have currently set it to the "Name"(Test) field that we specify in the Settings->OAuth 2.0 Integrated Application. I even tried using various other scopes as "offline_access" based on the below doc(https://academy.creatio.com/docs/8.x/dev/development-on-creatio-platfor…) , but it doesn't make any difference. 

Like 0

Like

1 comments

Hello Prabu Devarrajan,

Take a look at https://xxxx-demo-is.creatio.com/.well-known/openid-configuration, you will find a section called "scopes_supported". This is an example for my personal site:

{
	"issuer": "creatio.com",
	"jwks_uri": "https://xxxx-demo-is.creatio.com/.well-known/openid-configuration/jwks",
	"authorization_endpoint": "https://xxxx-demo-is.creatio.com/connect/authorize",
	"token_endpoint": "https://xxxx-demo-is.creatio.com/connect/token",
	"userinfo_endpoint": "https://xxxx-demo-is.creatio.com/connect/userinfo",
	"end_session_endpoint": "https://xxxx-demo-is.creatio.com/connect/endsession",
	"check_session_iframe": "https://xxxx-demo-is.creatio.com/connect/checksession",
	"revocation_endpoint": "https://xxxx-demo-is.creatio.com/connect/revocation",
	"introspection_endpoint": "https://xxxx-demo-is.creatio.com/connect/introspect",
	"device_authorization_endpoint": "https://xxxx-demo-is.creatio.com/connect/deviceauthorization",
	"frontchannel_logout_supported": true,
	"frontchannel_logout_session_supported": true,
	"backchannel_logout_supported": true,
	"backchannel_logout_session_supported": true,
	"scopes_supported": [
		"openid",
		"profile",
		"email",
		"phone"
	],
	...
}

Maybe you can try with those values and check if the authorization can end successfully.

Regards.

Show all comments