Summary

I got the same error on my installation.

I am using SimpleSAMLphp Version 1.15.0 and current master from https://github.com/simplesamlphp/simplesamlphp-module-openidprovider, installed using composer. It loaded openid/php-openid Version 2.3.0.

Analysis

The problem is the following code in function processRequest in modules/openidProvider/lib/Server.php, which tries to acces the private property identity on an instance of Auth_OpenID_CheckIDRequest:

		if (!$request->idSelect() && $identity !== $request->identity) {
			/* The identity in the request doesn't match the one of the logged in user. */
			throw new SimpleSAML_Error_Exception('Logged in as different user than the one requested.');
		}

Quickfix

Replace the code in modules/openidProvider/lib/Server.php:

		if (!$request->idSelect() && $identity !== $request->identity) {

with

		if (!$request->idSelect() && $identity !== $request->getIdentity()) {

Add the following code in class Auth_OpenID_CheckIDRequest in vendor/openid/php-openid/Auth/OpenID/Server.php:

    /**
     * @return string
     */
    public function getIdentity()
    {
        return $this->identity;
    }

from php-openid.

This issue has been introduced in #136

I just create a pull request containing an easy fix for the issue. I know that the property would be private in a perfect world and access would happen through a getter method. To prevent adjustments in both libraries I went for the easy fix.

from php-openid.

Thank you!

from php-openid.