{"action":"closed","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2211","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2211/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2211/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2211/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2211","id":118726436,"number":2211,"title":"The client application is not known or is not authorized.(Related to 1832 and 1815)","user":{"login":"MacarioTala","id":4257928,"avatar_url":"https://avatars.githubusercontent.com/u/4257928?v=3","gravatar_id":"","url":"https://api.github.com/users/MacarioTala","html_url":"https://github.com/MacarioTala","followers_url":"https://api.github.com/users/MacarioTala/followers","following_url":"https://api.github.com/users/MacarioTala/following{/other_user}","gists_url":"https://api.github.com/users/MacarioTala/gists{/gist_id}","starred_url":"https://api.github.com/users/MacarioTala/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MacarioTala/subscriptions","organizations_url":"https://api.github.com/users/MacarioTala/orgs","repos_url":"https://api.github.com/users/MacarioTala/repos","events_url":"https://api.github.com/users/MacarioTala/events{/privacy}","received_events_url":"https://api.github.com/users/MacarioTala/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-11-24T23:32:10Z","updated_at":"2015-11-25T01:46:26Z","closed_at":"2015-11-25T01:46:26Z","body":"I've been trying to get IdentityServer to work and have had various levels of luck with the various samples. \r\n\r\nHowever, I've never been actually able to get the entire flow to work. (Request resource, get auth token, present token, get resource)\r\n\r\nI'm presently trying to get the embedded MVC sample to work and it's just not cooperating. \r\n\r\nI've gone through Dominic's Pluralsight courses and did some fairly thorough research on my own vis-a-vis SSL.\r\n\r\nHere's what I did:\r\n\r\n1.) Created a root cert using makecert and installed in trusted root.\r\n2.) created a signing cert using that root cert.\r\n3.) used cert in #2 for signing. \r\n\r\nMy startup class is being called and it's pretty standard:\r\n\r\n public class Startup\r\n    {\r\n        public void Configuration(IAppBuilder app)\r\n        {\r\n            app.Map(\"/identity\", idsrvApp => idsrvApp.UseIdentityServer(new IdentityServerOptions\r\n            {\r\n                SiteName = \"Embedded IdentityServer\",\r\n                SigningCertificate = LoadCertificate(),\r\n\r\n                Factory = new IdentityServerServiceFactory()\r\n                    .UseInMemoryUsers(Users.Get())\r\n                    .UseInMemoryClients(Clients.Get())\r\n                    .UseInMemoryScopes(StandardScopes.All),\r\n\r\n                AuthenticationOptions = new AuthenticationOptions\r\n                        {\r\n                            EnablePostSignOutAutoRedirect = true\r\n                        }\r\n            }));\r\n\r\n            \r\n\r\n            app.UseCookieAuthentication(new CookieAuthenticationOptions\r\n            {\r\n                AuthenticationType = \"Cookies\"\r\n            });\r\n\r\n            app.UseOpenIdConnectAuthentication(new OpenIdConnectAuthenticationOptions\r\n            {\r\n                Authority = \"https://Troy1/MVCAuthenticationServer/Identity\",\r\n                ClientId = \"mvc\",\r\n                RedirectUri = \"https://Troy1/MVCAuthenticationServer\",\r\n                ResponseType = \"id_token token\",\r\n                SignInAsAuthenticationType = \"Cookies\"\r\n            });\r\n        }\r\n\r\n        private static X509Certificate2 LoadCertificate()\r\n        {\r\n            return new X509Certificate2(\r\n                string.Format(@\"D:\\study\\MVCGettingStarted\\MVCAuthenticationServer\\MVCAuthenticationServer\\bin\\IdentityServer\\Troy1.cer\"),\r\n                \"Password\");\r\n        }\r\n    }\r\n\r\nThere is also a clients class, also fairly standard and following the walkthrough:\r\n\r\n public static class Clients\r\n    {\r\n        public static IEnumerable<Client> Get()\r\n        {\r\n            return new[]\r\n        {\r\n            new Client \r\n            {\r\n                Enabled = true,\r\n                ClientName = \"MVC Client\",\r\n                ClientId = \"mvc\",\r\n                Flow = Flows.Implicit,\r\n\r\n                RedirectUris = new List<string>\r\n                {\r\n                    \"http://Troy1/MVCAuthenticationServer\"\r\n                },\r\n\r\n                AllowAccessToAllScopes = true\r\n            }\r\n        };\r\n        }\r\n    }\r\n\r\nOnce I try to protect the about action in the Home controller thusly:\r\n\r\n[Authorize]\r\n        public ActionResult About()\r\n        {\r\n            return View((User as ClaimsPrincipal).Claims);\r\n        }\r\n\r\nIt tells me that \"The client application is not known or is not authorized.\" instead of presenting me with a login screen.\r\n\r\nI would very much like to be able to use IdentityServer3, but I'm not quite sure what I'm doing wrong.\r\n\r\nCheers\r\n\r\n"}}