Found it. 1. Had to set Auth-Type in example_authorize 2. I was checking the response to the challenge in example_authorize instead of example_authenticate. Once I put the check in authenticate, it worked. ScottN