Configuring NiFi for OIDC

AlanL — Wed, 04 Dec 2024 16:52:35 GMT

I'm trying to configure NiFi for OIDC but when I start the nifi process it dies with the error below. A curl shows that at least basic connectivity is working to the IDP. Any ideas what could be causing this? I can provide my nifi.properties and/or authorizers.xml if needed.

2024-11-20 00:22:09,786 ERROR [main] o.s.web.context.ContextLoader Context initialization failed
org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration': Unsatisfied dependency
expressed through method 'setFilterChains' parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'securityFilterChain' defined in org.a
pache.nifi.web.security.configuration.WebSecurityConfiguration: Unsatisfied dependency expressed through method 'securityFilterChain' parameter 7; nested exception is org.springframework.beans.factory.BeanCreati
onException: Error creating bean with name 'oAuth2LoginAuthenticationFilter' defined in org.apache.nifi.web.security.configuration.OidcSecurityConfiguration: Bean instantiation via factory method failed; nested
exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter]: Factory method 'oAuth2LoginAuthenticatio
nFilter' threw exception; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'clientRegistrationRepository' defined in org.apache.nifi.web.security.configu
ration.OidcSecurityConfiguration: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.springframework.security.oauth
2.client.registration.ClientRegistrationRepository]: Factory method 'clientRegistrationRepository' threw exception; nested exception is org.apache.nifi.web.security.oidc.OidcConfigurationException: OpenID Connec
t Metadata URL [https://oidc.stage.elogin.att.com/mga/sps/oauth/oauth20/metadata/ATTOIDC/.well-known/openid-configuration] retrieval failed

Re: Configuring NiFi for OIDC

DianaTorres — Wed, 04 Dec 2024 17:43:30 GMT

@AlanL Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our NiFi experts @MattWho @SAMSAL who may be able to assist you further.

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

question Configuring NiFi for OIDC in Support Questions

Configuring NiFi for OIDC

Re: Configuring NiFi for OIDC