Table of Contents

TOidcClient.SkipIssuerValidation Property

Gets or sets whether issuer validation is skipped during ID token processing.

Remarks

When False (the default), the iss claim in the identity token must exactly match the Authority value, and the issuer returned by the OpenID Connect discovery document must also match Authority. Set to True when connecting to multi-tenant identity providers -- for example, Microsoft Entra using the organizations authority -- where the per-tenant issuer in each token never matches the authority URL. Use OnValidateIssuer to supply custom validation logic in place of the standard check.

Syntax

Unit: Sphinx.OidcClient

property TOidcClient.SkipIssuerValidation: Boolean

See also