Spotfire Server: OpenID gives "Signed JWT rejected" (Microsoft Entra)

 The following errors may be seen when using OpenID authentication

or

This maybe seen when the OpenID provider is Microsft Entra. It is caused by an Entrprise Application being registered in Entra to use SAML authentication rather than OpenID.

The correct method to create a new Enterprise Application that uses OpenID authentication in Spotfire is as follows

1. Log on to Entra

2. Navigate to Enterprise Applications.

3. Select New Application,

4. Select Create your own Application

5. Select Non Gallery Application

These steps will ensure you are configuring a OpenID based application rather than a SAML based one.