Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-50367

SAMLException: Identity provider has no single sign on service available for the selected

    Details

    • Similar Issues:

      Description

      I have a problem setting up SAML authentication. I'm not sure if it's a misconfiguration or a bug, but without the help of an expert, I can't get the problem solved.

      As soon as I activate SAML authentication, I get the following exception on the login page:

      org.pac4j.saml.exceptions.SAMLException: Identity provider has no single sign on service available for the selected profileorg.opensaml.saml.saml2.metadata.impl.IDPSSODescriptorImpl@628767f5
      	at org.pac4j.saml.context.SAML2MessageContext.getIDPSingleSignOnService(SAML2MessageContext.java:93)
      

      (See full Stack Trace in attachments)

      If I call up the login URL (https://idp.[CompanyName].com/idp/startSSO.ping?PartnerSpId=Jenkins.PRD:SAML2) from the SAML server directly in my browser, I get a http login request and after entering the access data correctly I am forwarded to my Jenkins (where I am successfully logged in). So basically the SAML authentication works. But unfortunately not from Jenkins directly.

      I will attach all SAML settings to this ticket. I'm also attaching a recording from the Jenkins log. There I created a log recorder with the following log levels:

      org.jenkinsci.plugins.saml -> FINEST.
      org.pac4j -> FINE.

      I hope someone can help me identify the problem.

        Attachments

          Activity

          Hide
          reitzmichnicht Michael Düsterhus added a comment -

          Can be closed, SingleSignOnService information was missing in idp metadata

          Show
          reitzmichnicht Michael Düsterhus added a comment - Can be closed, SingleSignOnService information was missing in idp metadata
          Hide
          ifernandezcalvo Ivan Fernandez Calvo added a comment -

          thx, I added this to the troubleshooting guide for future users.

          Show
          ifernandezcalvo Ivan Fernandez Calvo added a comment - thx, I added this to the troubleshooting guide for future users.

            People

            • Assignee:
              ifernandezcalvo Ivan Fernandez Calvo
              Reporter:
              andre_ Andre Iske
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: