Skip to main content
Solved

Indicium requires RequireHttpsMetadata=false setting but how do I set this?

  • December 5, 2022
  • 2 replies
  • 728 views

Forum|alt.badge.img+17

I can no longer navigate to my local indicium instance. It's giving me a 500 error and the log shows this error: 

2022-12-05T13:46:28.4343183+01:00 8000000b-0009-ff00-b63f-84710c7967bb [ERR] An unhandled exception occurred while processing the request. (ffba027a)
System.InvalidOperationException: The MetadataAddress or Authority must use HTTPS unless disabled for development by setting RequireHttpsMetadata=false.

Where do I set this setting? I can't find any documentation on this. Do I set it in the appsettings or web config? And in what section does this need to be added?

Best answer by Vincent Doppenberg

Hello Erwin,

We don't actually have a ‘RequireHttpsMetadata’ setting, this error message comes from a component that we use.

To resolve this problem, follow the following steps:

  • If you have OpenID providers configured in IAM, ensure that their Metadata endpoints use the https:// scheme or remove them.
  • If you have OpenID clients configured in IAM and you have the BearerTokenAuthority setting configured in your appsettings, make sure that it uses the https:// scheme or remove it.

Hope this helps.

2 replies

Forum|alt.badge.img+4

Hello Erwin,

We don't actually have a ‘RequireHttpsMetadata’ setting, this error message comes from a component that we use.

To resolve this problem, follow the following steps:

  • If you have OpenID providers configured in IAM, ensure that their Metadata endpoints use the https:// scheme or remove them.
  • If you have OpenID clients configured in IAM and you have the BearerTokenAuthority setting configured in your appsettings, make sure that it uses the https:// scheme or remove it.

Hope this helps.


Forum|alt.badge.img+17
  • Author
  • Moderator
  • December 5, 2022

Vincent, I once added a open id provider line to test something for a customer. I had no clue this had an impact on the indicium instance. Removing this line from the sf solved the problem.