{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1937","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1937/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1937/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1937/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1937","id":107933978,"number":1937,"title":"ResourceOwner not working with ext Idp only","user":{"login":"davidmrichter","id":9887781,"avatar_url":"https://avatars.githubusercontent.com/u/9887781?v=3","gravatar_id":"","url":"https://api.github.com/users/davidmrichter","html_url":"https://github.com/davidmrichter","followers_url":"https://api.github.com/users/davidmrichter/followers","following_url":"https://api.github.com/users/davidmrichter/following{/other_user}","gists_url":"https://api.github.com/users/davidmrichter/gists{/gist_id}","starred_url":"https://api.github.com/users/davidmrichter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidmrichter/subscriptions","organizations_url":"https://api.github.com/users/davidmrichter/orgs","repos_url":"https://api.github.com/users/davidmrichter/repos","events_url":"https://api.github.com/users/davidmrichter/events{/privacy}","received_events_url":"https://api.github.com/users/davidmrichter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-09-23T14:36:53Z","updated_at":"2015-09-23T15:11:56Z","closed_at":null,"body":"Hello,\r\n\r\nI have an instance of identityserver which is connected to some external Idp. Local Login is disabled so that everyone has to login over the external Idp.\r\nWith Hybrid Flow the identityServer communicates with the external Idp. \r\nWith ResourceOwner Flow the identityserver does not trigger to the external Idp. instead Exception is thrown:\r\n\r\nprivate async Task<ValidationResult> ValidateResourceOwnerCredentialRequestAsync(NameValueCollection parameters)\r\n        {\r\n            Logger.Info(\"Start password token request validation\");\r\n\r\n            // if we've disabled local authentication, then fail\r\n            if (_options.AuthenticationOptions.EnableLocalLogin == false ||\r\n                _validatedRequest.Client.EnableLocalLogin == false)\r\n            {\r\n                LogError(\"EnableLocalLogin is disabled, failing with UnsupportedGrantType\");\r\n                return Invalid(Constants.TokenErrors.UnsupportedGrantType);\r\n            }\r\n            \r\n\r\nHere is the calling code:\r\n\r\nvar client = new OAuth2Client(\r\n\t\t\t\tnew Uri(Configs.IdentityAccessServiceURI + Configs.IdentityAccessServiceToken_EndPoint),\r\n\t\t\t\t\"ReportingClient\",\r\n\t\t\t\t\"secret\");\r\n\r\n\t\t\treturn client.RequestResourceOwnerPasswordAsync(username, password, \"ReportingService\").Result;\r\n\r\nIt seems that with ResourceOwnerFlow external Idps are not supported by identityServer.\r\nAny hint?"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/142634878","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1937#issuecomment-142634878","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1937","id":142634878,"user":{"login":"davidmrichter","id":9887781,"avatar_url":"https://avatars.githubusercontent.com/u/9887781?v=3","gravatar_id":"","url":"https://api.github.com/users/davidmrichter","html_url":"https://github.com/davidmrichter","followers_url":"https://api.github.com/users/davidmrichter/followers","following_url":"https://api.github.com/users/davidmrichter/following{/other_user}","gists_url":"https://api.github.com/users/davidmrichter/gists{/gist_id}","starred_url":"https://api.github.com/users/davidmrichter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidmrichter/subscriptions","organizations_url":"https://api.github.com/users/davidmrichter/orgs","repos_url":"https://api.github.com/users/davidmrichter/repos","events_url":"https://api.github.com/users/davidmrichter/events{/privacy}","received_events_url":"https://api.github.com/users/davidmrichter/received_events","type":"User","site_admin":false},"created_at":"2015-09-23T15:11:55Z","updated_at":"2015-09-23T15:11:55Z","body":"Now in our scenario we have service to service communication. And we rely solely on the external Idp. \r\n\r\nWhat can we do?\r\n\r\n"}}