question

Akz0rz-6344 avatar image
0 Votes"
Akz0rz-6344 asked ·

Azure B2c OIDC - The key type 'EC' from the JSON web keys endpoint 'https://akztest/pf/JWKS is not a supported key type.

While setting up Azure B2C OIDC to PingFederate I get the following error:
The key type 'EC' from the JSON web keys endpoint 'https://akztest/pf/JWKS is not a supported key type.

I am using the proper .well-known\openid-configuration endpoint.

I have set my Access token manager to use RSA, but it's as if Microsoft is not allowing anything because the JWKS have other cyphers?

Please help.

azure-active-directoryazure-ad-b2c
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered ·

@Akz0rz-6344
Azure AD B2C cannot parse the Identity provider metadata when it contains EC keys. So, it requires exposing metadata that only contains RSA Keys. We have a feature request opened to add support for EC Keys in future but there is no ETA as of now.


Please "mark as answer" or "vote as helpful" wherever the information provided helps you to help others in the community.

· 3 ·
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DavidHunziker-4398 avatar image DavidHunziker-4398 ·

Any updates?

0 Votes 0 ·
amanpreetsingh-msft avatar image amanpreetsingh-msft DavidHunziker-4398 ·

Once there is an update it will be posted here: https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/38510968-aad-b2c-add-support-for-ec-key-type-to-openid-con

1 Vote 1 ·
AjmeraPankajKingofPrussia-2820 avatar image AjmeraPankajKingofPrussia-2820 ·

Any update on this, I saw the other URL as well but didn;t find any update... when the support of EC type key is going to be available????

If not soon, then what is the interim solution other then asking IdP to disable it, which is kind of not doable as that impact their other applications.

0 Votes 0 ·