Thanks Alexander.

I did associate the IDP with the user account, and allowed that user to use the 
idp auth type.

That troubleshooting section helped, I was able to find this response after 
increasing the oidc debug level:

{"error":"unauthorized_client","error_description":"client missing grant type 
authorization_code"}

I'm unsure if this is something I need to change on the IPA or zitadel side. 

The clients do support the krb5-preauth, they are all Fedora 39, fully updated. 
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to