Azure B2c OIDC - The key type 'EC' from the JSON web keys endpoint 'https://akztest/pf/JWKS is not a supported key type.

Question

While setting up Azure B2C OIDC to PingFederate I get the following error:
The key type 'EC' from the JSON web keys endpoint 'https://akztest/pf/JWKS is not a supported key type.

I am using the proper .well-known\openid-configuration endpoint.

I have set my Access token manager to use RSA, but it's as if Microsoft is not allowing anything because the JWKS have other cyphers?

Please help.

Answer 1

@Akz0rz
Azure AD B2C cannot parse the Identity provider metadata when it contains EC keys. So, it requires exposing metadata that only contains RSA Keys. We have a feature request opened to add support for EC Keys in future but there is no ETA as of now.

---------------------------------------------------------------------------------------------------------------

Please "mark as answer" or "vote as helpful" wherever the information provided helps you to help others in the community.