May I re-open the discussion, mentioned in the subject? My testing environment probably is newer then the one used in 2017. The gluu 4.2.3 server runs on a Virtual Box with Ubuntu 20.04 workstation, but the client is an asp.net page, which simply sends two get requests to the authorization and token endpoints. I probably miss something very obvious in the configuration of the server or an open id client and hope that you'll be able to point me to the setting that I garbled. Here is the url for my first get request: ``` https://test.gluu.org/oxauth/restv1/authorize?scope=openid&response_type=code&client_id=9ce09670-c48c-4bd2-8313-edea4650189f&redirect_uri=http://localhost/OpenId/Default.aspx ``` and this is for the second one: ``` https://test.gluu.org/oxauth/restv1/token?grant_type=authorization_code&code=15fecea3-a3c1-4dcf-aef4-07060b22b076 ``` The gluu.zip contains two configurations, tail of oxauth.log and the har file. Thank you. Aharon.