From 63eef80b6ae30b7714847cfe77aba70c8509beb3 Mon Sep 17 00:00:00 2001 From: Oleg Kunitsyn Date: Mon, 8 Dec 2025 13:31:45 +0100 Subject: [PATCH] !![ODM-12929] Remove unnecessary query parameter --- docs/home/single-sign-on/openid/azure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/home/single-sign-on/openid/azure.md b/docs/home/single-sign-on/openid/azure.md index 4e858761..e46c3f2d 100644 --- a/docs/home/single-sign-on/openid/azure.md +++ b/docs/home/single-sign-on/openid/azure.md @@ -136,7 +136,7 @@ After that you need to provide AzureAD with necessary information about ODM. Nav ### Note about access token version -ODM is configured to use version 2 of OpenID Connect protocol implementation in AzureAD, as defined by the discovery document URL: `https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration?appId={clientId}` +ODM is configured to use version 2 of OpenID Connect protocol implementation in AzureAD, as defined by the discovery document URL: `https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration` However, for access tokens AzureAD uses the version 1 format by default, which is incompatible with configuration from v2 OpenID Connect discovery document: `iss` claim in v1 access token format has values like `https://sts.windows.net/{uuid}/` while the expected `iss` claim format in v2 configuration is `https://login.microsoftonline.com/{uuid}/v2.0`.