Hello everyone 👋 I’m trying to use the

pairwise

strategy for subjects. I enabled the strategy in the config and provided a 16 character long salt as stated in the docs. The new config seems to be applied properly as I was able to update the

subject_type

of an existing client to

pairwis

which failed before. Unfortunately, flows for that client are now failing after approving the request via

acceptOAuth2LoginRequest

with the following error message:

{
  error: 'invalid_request',
  error_description: 'The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed. Subject Identifier Algorithm 'pairwise' was requested by OAuth 2.0 Client 'dc61f99d-adfe-458a-86bf-3a316f2a789c' but is not configured.'
}

I’m quite lost which configuration part is missing. Anyone having an idea where to look?