UseOpenIdConnectAuthentication - Unable to unprotect the message.State Error Message

Question

I am trying to add Google and Azure Active Directory authorities as OpenIdConnect options in my application.

If i add each of them separately, it works fine. But if i add them both i get the following error message:

Unable to unprotect the message.State

These are the OpenIdConnectOptions configuration:

        //Google
        appBuilder.UseOpenIdConnectAuthentication(new OpenIdConnectOptions
        {                 
            ClientId = ".....apps.googleusercontent.com",
            Authority = $"https://accounts.google.com",
            ClientSecret = "xxxyyyzzzz",
            AuthenticationScheme = "Google",
            DisplayName = "Google",
            AutomaticChallenge = true                                       
        });

        //Azure AD Providers
        var schemeName = "Azure Active Directory";
        var clientId = "1234567890";  
        var tenantId = "0987654321";  

        appBuilder.UseOpenIdConnectAuthentication(new OpenIdConnectOptions
        {               
            ClientId = clientId,
            ClientSecret = "aaaaabbbbcccc",
            Authority = $"https://login.microsoftonline.com/{tenantId}",
            AuthenticationScheme = "Azure Active Directory",
            DisplayName = "Azure Active Directory",
            AutomaticChallenge = true,                                                
        });

score 9 · Accepted Answer · answered May 03 '17 at 20:05

9

When you have multiple OIDC middleware, you need to set a unique CallbackPath for each of them. Otherwise they are stepping on each other's toes when handling the callback.

answered May 03 '17 at 20:05

leastprivilege

18,196
1
34
50

yes that was the issue. I thought that just the Authentication Scheme needed to be unique. – alessalessio May 04 '17 at 16:30
6

I don't have multiple OIDC middleware still facing the issue. Any suggestions? – Nouman Bhatti Sep 12 '17 at 00:53
4

I don't have mutilple OIDC middlewares too and still facing the error – TheMah Jul 08 '20 at 09:00
This answer clarifies and includes an example: https://stackoverflow.com/questions/42404177/multiple-identityserver-federation-error-unable-to-unprotect-the-message-state – Nick Evans Jul 20 '21 at 23:13

UseOpenIdConnectAuthentication - Unable to unprotect the message.State Error Message

1 Answers1

Linked