UNCLASSIFIED - NO CUI

Skip to content

Authservice 1.0 Microsoft Identity JWKS "alg" issue

Just making the team aware of following error we ran into after upgrading to 2.24.0

Authservice 1.0 error when working with Microsoft Entra

Istio authservice's OIDC functionality with Microsoft Identity/Entra as the identity provider. After login, the authservice logs display the error:

level=error msg="error verifying id token with fetched jwks" x-request-id="..." scope="authz" type="oidc" session-id="..." error="could not verify message using any of the signatures or keys"

Authservice has fixed

https://github.com/istio-ecosystem/authservice/issues/246 https://github.com/istio-ecosystem/authservice/pull/247

Currently we have worked around using the old version built on C++ as it doesn't look like the update has made it's way to registry1.