SAML Login: Invalid Token Error [PingID] | Community
Skip to main content
Mahedi_Sabuj
Mahedi_Sabuj
New Participant
Oct 3, 2023 12:57 PM UTC
Solved

SAML Login: Invalid Token Error [PingID]

We are in the process of integrating SAML login using SAML Handler for one of our websites. The login process works correctly at the SAML provider (PingID) end. However, once redirection to our AEM site, we encounter an "invalid token" error at this URL: 
https://aem-community.com/libs/granite/core/content/login.error.html?j_reason=invalid_token.

Upon investigating the error logs, we came across the following error:
org.apache.sling.auth.core.impl.SlingAuthenticator doLogin: Cannot login: Response already committed

Can anyone guide us how to resolve the issue?

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    EstebanBustamante
    EstebanBustamanteAccepted solution
    New Participant
    Oct 3, 2023 2:43 PM UTC

    Can you expand on what it means "the login process works correctly", does it mean that you are logged in but it is just not redirecting to a valid page? Also, did you check these posts? https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/com-adobe-granite-auth-saml-samlauthenticationhandler-saml-error/td-p/325015 

    https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/saml-aem-infinite-loop/td-p/191177

    Esteban Bustamante
    View reply

    2 replies

    EstebanBustamante
    EstebanBustamanteAccepted solution
    New Participant
    Oct 3, 2023 2:43 PM UTC

    Can you expand on what it means "the login process works correctly", does it mean that you are logged in but it is just not redirecting to a valid page? Also, did you check these posts? https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/com-adobe-granite-auth-saml-samlauthenticationhandler-saml-error/td-p/325015 

    https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/saml-aem-infinite-loop/td-p/191177

    Translate
    Esteban Bustamante
      Mahedi_Sabuj
      Mahedi_SabujAuthor
      New Participant
      Oct 4, 2023 7:54 AM UTC

      Hi @estebanbustamante,

      "The login process works correctly" means SAML provider (PingID) response SAML attributes as expected. Issue seems related to the certificate stored in the truststore. We may need to delete and re-upload the new idp_cert as recommended here https://experienceleague.adobe.com/docs/experience-cloud-kcs/kbarticles/KA-17476.html.

       

      Translate
      Mahedi Sabuj
      Terms & ConditionsAccessibility statement

      Loading footer...