JWT is not well formed

Question

JWT is not well formed

Closed this issue 5 months ago · 2 comments

Christopher-Vaughan-MSSA commented 10 months ago

Flangvik-

Issue when attempting to exfil after successfully spray. I am getting an IDX12709 error that the JWT is not well formed.

Any advice?

Thanks!

Answer 1 · 2023-09-04T10:05:37.000Z

Interestingly, this error seems to indicate that the token received in the response of the valid login is not a valid JWT token, which is really weird. Are there any more details you could give without disclosing anything sensitive? Any special SSO or other setup for this client?

Answer 2 · 2023-09-05T12:08:55.000Z

The target user is a regular user with federated authentication. The client is hybrid joined. Happy to share screen captures or anything else that may help figure it out.