bad audience value

[Muhammad Asif]

Hello,

I have setup SMART Dev Sandbox (https://github.com/smart-on-fhir/smart-dev-sandbox). I'm launching our Smart app that is secured with KeyCloak. On launch getting error bad_audience (bad audience value).
i tried setting aud parameter value to to token/auth endpoints of SMART dev sandbox but error persists.

Can someone guide what exact value aud parameter needs to be?

Thank you

[Evan Schnell]

I too am stuck on this error with keycloak.    

I added all the audience mappers recommended by the Keycloak documentation.  

This request:

https://launch.smarthealthit.org/v/r4/auth/authorize?scope=openid&state=DIba-icw_5D9mvLtRrzN-sNP5tM74LPf-gqvYqpM7TA.Zg51IvzW9xc.Obfuscated&response_type=code&client_id=good-service&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fauth%2Frealms%2FObfuscated%2Fbroker%2Fsmarthealth%2Fendpoint&prompt=none&nonce=F1BEyd1-p33ISeaV_9Q5aA

Generates this redirect:  

http://localhost:8080/auth/realms/Obfuscated/broker/smarthealth/endpoint?error=invalid_request&error_description=Missing+aud+parameter&state=DIba-icw_5D9mvLtRrzN-sNP5tM74LPf-gqvYqpM7TA.Zg51IvzW9xc.Obfuscated

Is there error legit?  error=invalid_request&error_description=Missing+aud+parameter&state=lWCpI8

The error is reported by launch.smarthealthit.org TO keycloak, not by keycloak.  

Has anyone been able to make this work with keycloak?  

[Evan Schnell]

You can workaround the bad audience value by adding it directly to the Authorization URL in the admin console:    

https://launch.smarthealthit.org/v/r4/auth/authorize?aud=https%3A%2F%2Flaunch.smarthealthit.org%2Fv%2Fr4%2Ffhir

After I do that I hit this issue:   https://keycloak.discourse.group/t/identitybrokerexception-no-token-from-server/12011 

Has anyone been able to connect KeyCloak to https://launch.smarthealthit.org/index.html ?