I created a Power Page site and added a custom domain. I set up an OpenID Connect identity provider and set that as the default sign in method. I also set up a redirect to always use the custom domain.
When I try to sign in using the custom domain, I get a "Sign in failed" error and I'm redirected to /Account/Login/ExternalAuthenticationFailed.
When I look at the logs, I get this message:
Exception during OpenIdConnect or Azure Authentication in Microsoft.IdentityModel.Protocols.OpenIdConnect: IDX21323: RequireNonce is '[PII is hidden]'. OpenIdConnectProtocolValidationContext.Nonce was null, OpenIdConnectProtocol.ValidatedIdToken.Payload.Nonce was not null. The nonce cannot be validated. If you don't need to check the nonce, set OpenIdConnectProtocolValidator.RequireNonce to 'false'. Note if a 'nonce' is found it will be evaluated.; Error Description: , ErrorCategory:ApplicationError
Is there a way to allow the sign-in from the custom domain?

Report
All responses (
Answers (