Currently, I have an instance of Canonical Landscape installed and I would like to change the authentication method to use ADFS 2016 via OpenID.
However, Landscape offers these two configurations in services.conf:
openid-provider-url = https://login.ubuntu.com/
openid-logout-url = https://login.ubuntu.com/+logout
If I append the following url:
openid-provider-url = https://<my_adfs_server>/adfs/oauth2/authorize/
I Get the error:
Error in discovery: Error fetching XRDS document: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>
Installing the ADFS certificate does not solve my problem and as there is no place for me to configure the clientId from ADFS OpenID.
How is it possible to integrate Landscape with ADFS via OpenID?
*PAM is not an option, because I can't connect directly to AD.