{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/80","labels_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/80/labels{/name}","comments_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/80/comments","events_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/80/events","html_url":"https://github.com/IdentityManager/IdentityManager/issues/80","id":49961442,"number":80,"title":"OAuth2 Login Redirects back with no permissions","user":{"login":"parkinsona","id":8508456,"avatar_url":"https://avatars.githubusercontent.com/u/8508456?v=3","gravatar_id":"","url":"https://api.github.com/users/parkinsona","html_url":"https://github.com/parkinsona","followers_url":"https://api.github.com/users/parkinsona/followers","following_url":"https://api.github.com/users/parkinsona/following{/other_user}","gists_url":"https://api.github.com/users/parkinsona/gists{/gist_id}","starred_url":"https://api.github.com/users/parkinsona/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/parkinsona/subscriptions","organizations_url":"https://api.github.com/users/parkinsona/orgs","repos_url":"https://api.github.com/users/parkinsona/repos","events_url":"https://api.github.com/users/parkinsona/events{/privacy}","received_events_url":"https://api.github.com/users/parkinsona/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityManager/IdentityManager/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2014-11-25T00:24:21Z","updated_at":"2015-04-07T01:47:28Z","closed_at":null,"body":"Hi,\r\n\r\nI'm attempting to implement the OAuth2 settings for IdentityManager. I'm using my own idsvr3 host.\r\nRunning as local machine works like a charm, and I added a user with the default admin role (IdentityManagerAdministrator).\r\n\r\nWhen I click the login link, it redirects to idsvr3 correctly. I login, and it then redirects me back to idmgr. However, it only gives me the login link, none of the admin links. \r\nIf I login as a user without the admin role, it behaves in the same way.\r\n\r\nI think my configuration may be at fault. \r\n\r\n``` c#\r\n      var factory = new Thinktecture.IdentityManager.Host.MembershipRebootIdentityManagerFactory(\"IdentityManagerMembershipReboot\");\r\n            \r\n            app.UseIdentityManager(new IdentityManagerConfiguration()\r\n            {\r\n                   \r\n                IdentityManagerFactory = factory.Create,\r\n                 AdminRoleName= \"IdentityManagerAdministrator\",\r\n                SecurityMode =   (IdentityManager.SecurityMode) Enum.Parse(typeof(IdentityManager.SecurityMode), Properties.Settings.Default.SecurityMode),\r\n           \r\n               \r\n\r\n                      OAuth2Configuration = new OAuth2Configuration\r\n                    {\r\n                        AuthorizationUrl = Properties.Settings.Default.AuthorizationUrl ,\r\n                        Issuer = Properties.Settings.Default.IssuerUri,\r\n                        Audience = \"https://idsrv3.com/resources\",\r\n                        ClientId = \"implicitclient\",\r\n                        SigningCert = Cert.Load(),\r\n                        Scope = \"idmgr\",\r\n                         \r\n                        //PersistToken = true,\r\n                        //AutomaticallyRenewToken = true\r\n                    }\r\n\r\n\r\n              \r\n\r\n            });\r\n```\r\n\r\nThe above config settings are:\r\nAuthorizationUrl = https://localhost:44333/core/connect/authorize<\r\nSecurityMode = OAuth2\r\nIssuerUri=Same as the one specified in Idsvr3.\r\n\r\nIt seems as though the token coming back from idsvr3 can't be read by idmgr. \r\n\r\nThe eveng log has the below message. So something is getting returned, but I don't know if it can be interpreted.\r\n\r\nAny ideas?\r\n\r\n```\r\n[Thinktecture.IdentityServer.Core.Results.AuthorizeRedirectResult]: 25/11/2014 12:18:43 AM -- Redirecting to: http://localhost/IdentityManager/#/callback#access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImEzck1VZ01Gdjl0UGNsTGE2eUYzekFrZnF1RSIsImtpZCI6ImEzck1VZ01Gdjl0UGNsTGE2eUYzekFrZnF1RSJ9.eyJjbGllbnRfaWQiOiJpbXBsaWNpdGNsaWVudCIsInNjb3BlIjoiaWRtZ3IiLCJzdWIiOiIzMDZmODc2Zi0wMDEwLTQxYWEtYTEyYy03MzA4YTk0YjM2MDMiLCJhbXIiOiJwYXNzd29yZCIsImF1dGhfdGltZSI6MTQxNjg3NDcyMywiaWRwIjoiaWRzcnYiLCJuYW1lIjoiZXdlcmV3ciIsInJvbGUiOiJJZGVudGl0eU1hbmFnZXJBZG1pbmlzdHJhdG9yIiwiaXNzIjoiaHR0cHM6Ly9zZW1hZ3JvdXAuY29tLmF1IiwiYXVkIjoiaHR0cHM6Ly9zZW1hZ3JvdXAuY29tLmF1L3Jlc291cmNlcyIsImV4cCI6MTQxNjg3NTA4MywibmJmIjoxNDE2ODc0NzIzfQ.fTYIsdV9reIkLrOEJM0zsCV0L-gq6dkvFFrzMM0CYizjStG5JWjuqKivnSASn0CW8Jkcdb_vFWypK-VSzHcSuZ09AqYPzBBzeRk1xHSikK_JfYu75ESGcf0QTbgtsuFFs7KLnkaMjyj65JsVNiUNKeF8AQ9vFDxCyeHfp15aw2QBLC44fKz0KbEcK9C9u3d_VTVgr6Y5b7Ps0ocqLBcZYite-s7ah5F3ppQa2lugRmGwG4bjZJtv8Rt0eoet7iKqL5rjbTd_tjeg8QULBpt9Y50I9Ef33hNheDv6eik254EM_dIF3ltWsStQaxcdAqP0LxSWGdmGkEDSN0P7JJQnGA&token_type=Bearer&expires_in=360&scope=idmgr&state=8951963276200745\r\n```"},"comment":{"url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/comments/90309035","html_url":"https://github.com/IdentityManager/IdentityManager/issues/80#issuecomment-90309035","issue_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/80","id":90309035,"user":{"login":"hungvq","id":8001014,"avatar_url":"https://avatars.githubusercontent.com/u/8001014?v=3","gravatar_id":"","url":"https://api.github.com/users/hungvq","html_url":"https://github.com/hungvq","followers_url":"https://api.github.com/users/hungvq/followers","following_url":"https://api.github.com/users/hungvq/following{/other_user}","gists_url":"https://api.github.com/users/hungvq/gists{/gist_id}","starred_url":"https://api.github.com/users/hungvq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hungvq/subscriptions","organizations_url":"https://api.github.com/users/hungvq/orgs","repos_url":"https://api.github.com/users/hungvq/repos","events_url":"https://api.github.com/users/hungvq/events{/privacy}","received_events_url":"https://api.github.com/users/hungvq/received_events","type":"User","site_admin":false},"created_at":"2015-04-07T01:47:28Z","updated_at":"2015-04-07T01:47:28Z","body":"Thank for your infor @parkinsona.\r\nSo, I have to build my own one.\r\nBTW, https://contacts.google.com is first good idea :) \r\n(IM can not change the UI)."}}