Exception message: Unable to get document from “…/identity/.well-known/openid-configuration”

Problem

If you receive the following exception in the Event Log when trying to access one or more XMPro products (with Subscription Manager), it is likely that there is an issue connecting to the configured Subscription Manager instance.

Exception information:

Exception type: IOException 
Exception message: Unable to get document from: https://host.org.com.au/xmprosubscriptionmanager/identity/.well-known/openid-configuration
at Microsoft.IdentityModel.Protocols.HttpDocumentRetriever.<GetDocumentAsync>d__0.MoveNext()

--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.IdentityModel.Protocols.OpenIdConnectConfigurationRetriever.<GetAsync>d__0.MoveNext()

--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.IdentityModel.Protocols.ConfigurationManager`1.<GetConfigurationAsync>d__3.MoveNext()

Response status code does not indicate success: 404 (Not Found).
at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode()
at Microsoft.IdentityModel.Protocols.HttpDocumentRetriever.<GetDocumentAsync>d__0.MoveNext()

Troubleshooting

1. Verify that the subscription manager instance is accessible by navigating to the url in exception message (in this case https://host.org.com.au/xmprosubscriptionmanager/identity/.well-known/openid-configuration) in your browser. You should see a JSON response similar to the following:

   {"issuer":"https://host.org.com.au/xmprosubscriptionmanager/identity","jwks_
   uri":"https://host.org.com.au/xmprosubscriptionmanager/identity/.well-
   known/jwks","authorization_endpoint":"https://host.org.com.au/xmprosubscriptionmanager/
   identity/connect/authorize","token_endpoint":"https://host.org.com.au/xmprosubscriptionmanager/
   identity/connect/token","userinfo_endpoint":"https://host.org.com.au/xmprosubscriptionmanager/
   identity/connect/userinfo","end_session_endpoint":"https://host.org.com.au/xmprosubscriptionmanager/
   identity/connect/endsession","check_session_iframe":"https://host.org.com.au/xmprosubscriptionmanager/
   identity/connect/checksession","revocation_endpoint":"https://host.org.com.au/xmprosubscriptionmanager/
   identity/connect/revocation","introspection_endpoint":"https://host.org.com.au/xmprosubscriptionmanager/
   identity/connect/introspect","http_logout_supported":true,"scopes_supported":["openid","profile",
   "offline_access","fullaccess","rp_access"],"claims_supported":["sub","name","family_name","given_name",
   "middle_name","nickname","preferred_username","profile","picture","website","gender","birthdate","zoneinfo",
   "locale","updated_at"],"response_types_supported":["code","token","id_token","id_token token",
   "code id_token","code token","code id_token token"],"response_modes_supported":["form_post","query","fragment"],
   "grant_types_supported":["authorization_code","client_credentials","password","refresh_token","implicit"],
   "subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"],"token_endpoint_auth_
   methods_supported":["client_secret_post","client_secret_basic"]}
   
   

   If you received a 404 Not Found or other error, contact you network support staff to assist in troubleshooting network-level access to the URL.

2. If the URL of the subscription manager has changed, the application configuration will need to be updated to reflect these changes.

• Action Hub: The Subscription Manage configuration can be found in the ‘SubscriptionManager’ custom setting in the Application Settings (site.config).

• Process Designer: The web.config file in the process designer site folder contains the Subscription Manager configuration within the xmpro\xmidentity tag. A sample is provided below

<xmpro>
     <xmidentity>
          <server baseUrl="https://myhost.com/xmprosubscriptionmanager/" />
          <client id="59e5d699-0cb4-4413-bedd-a1f62716ee92" baseUrl="http://myhost.com/process.designer/" sharedKey=
          "bLorOwVs5bMD0V9tjdvgr+B6jmjUyHsIC8vtmqusfWI=" />
     </xmidentity>
</xmpro>

• Other products: Check the XMPro Documentation Site for details.