I have a functioning login flow for my site via IdentityServer. When I test the flow on the CM server (but the frontend site) everything works ok. When I try the same thing on my CD server, I get:

Unable to reach an external identity provider.

IDX20803: Unable to obtain configuration from: '[PII is hidden]'.

No obvious errors are logged. It simply fails to find an IdentityProvider.

The Sitecore version is 9.1.1 and has been provisioned via Azure Marketplace.


Turns out, when Sitecore sets up these instances, it does some variable replacement in various config files.

On CM, the file Sitecore.Owin.Authentication.IdentityServer.config gets this replacement (near the top of the file):

<sc.variable name="identityServerAuthority" value="https://[redacted]-si.azurewebsites.net" />

So the installation script will have replaced the token that was presumably in place here, with the real host of IdentityServer.

On the CD server, however, the file looks like this (by default):

<sc.variable name="identityServerAuthority" value="https://SitecoreIdentityServerHost" />

Which will obviously fail to resolve. Looks like a typo on whatever token replacement was to take place here.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.