Trying to create an OpenID Connect provider in my app to provide SSO into SF. I'm using a python library: pyoidc.
However, I keep getting redirected to an error URL...
https://na10.salesforce.com/_nc_external/identity/sso/ui/AuthorizationError? ErrorCode=No_Oauth_Token& ErrorDescription=Empty+Response
... Claiming both that there is no Oauth token and that the response is empty.
In my reading of the spec I don't see a requirement for an Oauth token.
The sequence of endpoints hit on my side is:
Authorization Verify Authorization
Any idea what the cause of that error is? Am I reading the spec wrong and I must have an Oauth token?