saml_login not found 404 | Community
Skip to main content
rajeevy89244319
Level 3
Dec 11, 2017 7:16 PM UTC
Solved

saml_login not found 404

i am trying to configure sso in aem 6.3. After IDP is redirecting to /saml_login url on aem, i am getting 404 error. In aem logs I can see below messages:

08.12.2017 17:15:18.244 *INFO* [CM Event Dispatcher (Fire ConfigurationEvent: pi                                                                             d=com.adobe.granite.auth.saml.SamlAuthenticationHandler)] com.adobe.granite.auth                                                                             .saml Service [com.adobe.granite.auth.saml.SamlAuthenticationHandler,59547, [org                                                                             .apache.sling.auth.core.spi.AuthenticationHandler]] ServiceEvent REGISTERED

08.12.2017 17:15:42.778 *DEBUG* [qtp1363622188-331043] com.adobe.granite.auth.sa                                                                             ml.SamlAuthenticationHandler Could not retrieve SP's private key: Uninitialised                                                                              key store for user authentication-service

I have added the idp public store in trust store and added alias on saml handler. Need suggestion on what could be the issue here.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
MC_Stuff
MC_StuffAccepted solution
Level 10
Dec 13, 2017 7:21 AM UTC

Hi Rajjev,

  It might be blocked at dispatcher level. Verify the filter to allow for /saml_login.   Can you send debug logs of com.adobe.granite.auth.saml?

Thanks,

9 replies

MC_Stuff
MC_StuffAccepted solution
Level 10
Dec 13, 2017 7:21 AM UTC

Hi Rajjev,

  It might be blocked at dispatcher level. Verify the filter to allow for /saml_login.   Can you send debug logs of com.adobe.granite.auth.saml?

Thanks,

Translate
rajeevy89244319
Level 3
Dec 12, 2017 4:09 PM UTC

Once i have allowed post request to /saml_login, it is now throwing 403 forbidden error.

Translate
rajeevy89244319
Level 3
Dec 12, 2017 3:56 PM UTC

Hi Sam,

In dispatcher logs, I can see below message

Filter rejects: POST /saml_login

I have added idp domain in referral filter. Do we need to do anything additional at dispatcher on aem instance to allow saml_login POST requests?

Translate
New Participant
Mar 31, 2022 8:53 AM UTC

Hi @rajeevy89244319 , did you get solution of this issue?

Translate
rajeevy89244319
Level 3
Dec 12, 2017 2:19 PM UTC

HI MC,

Path is / in SamlAuthenticationHandler configuration.

Translate
MC_Stuff
Level 10
Dec 12, 2017 6:52 AM UTC

Hi Rajeev,

   Sounds you have registered to different path. At com.adobe.granite.auth.saml.SamlAuthenticationHandler configure path to /

Thanks,

Translate
rajeevy89244319
Level 3
Dec 11, 2017 10:23 PM UTC

Thanks Sam. I noticed that password is not getting setup on authentication-service trust store. It is showing error message - Some error occured when setting the password.

Translate
smacdonald2008
Level 10
Dec 11, 2017 9:41 PM UTC

Also - watch this GEMS session on SAML and AEM - it may be beneficial to solving this issue -- Utilizing SAML in AEM deployments

Translate
smacdonald2008
Level 10
Dec 11, 2017 9:19 PM UTC

So community can attempt to reproduce your issue, please point to the online doc you are following.

Translate