SSO Errors

Question

Hi,
We are getting below errors when we do a performance test with 800 users after SSO SAML integration.
Functionalities are working fine.
 
10.10.2022 04:46:36.100 *ERROR* [qtp925298346-1857] org.apache.sling.auth.core.impl.SlingAuthenticator doLogin: Cannot login: Response already committed10.10.2022 04:46:36.088 *ERROR* [qtp925298346-100] com.adobe.granite.auth.saml.extidp.DefaultUserSync User synchronization failed: Could not access repository.javax.jcr.InvalidItemStateException: OakState0001: Unresolved conflicts in /home/users/6/64WwgJBe21O17S39-5J9
org.apache.jackrabbit.oak.spi.security.authentication.external.impl.ExternalLoginModule No IDP found with name e6897caa09f6514a8bfcaec6b5a3d05f. Will not be used for login
 
Any idea ?

Chandra_Hire · Accepted Answer

Can you check the permission for this user

/home/users/6/64WwgJBe21O17S39-5J9

Is exception given for only this user /home/users/6/64WwgJBe21O17S39-5J9 or there are more users having conflicts? If not, I would suggest removing the user and try login again so that through SAML configuration, user will be synced again in AEM and resolve the conflict.

Chandra_Hire · Answer

Hi @akhilraj

Looks like the permissions for the authentication-service user have been lost during performance testing. The authentication-service user is missing its permissions for the /home folder. Please try using the below solution.

SAML authentication loops and fails with "Access denied." (adobe.com)

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded