AEM 6.5 Assets - SAML2.0 'Assertion Consumer Service URL' Property | Community
Skip to main content
V
Vikashyadav
Level 3
August 15, 2020
Solved

AEM 6.5 Assets - SAML2.0 'Assertion Consumer Service URL' Property

  • August 15, 2020
  • 1 reply
  • 4857 views

Hi,

We have configured Adobe Granite SAML 2.0 Authentication Handler property "Assertion Consumer Service URL" with value like "http://<Host>/ssouser/saml_login" in osgi console. With this configuration we were successfully integrated and authenticated users. One fine day SSO login stops working(login page stops redirecting to SSO page) and we have seen in repository there were two nodes created with the same name & structure that "Assertion Consumer Service URL" property has. This created node has only 'jcr:primaryType' property.

 

Assertion Consumer Service URL in SAML2.0 config= http://<Host>/ssouser/saml_login

Node created in repository = /ssouser/saml_login

 

After removing this node from repository, login page start redirecting to SSO page successfully.

Just wanted to know, how this node has been created in repository? How we can restrict this node creation in repository?

 

Thanks.

 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by arunpatidar

Hi,

I am not sure why SSO stop working and instead of node is created but when you make a request to any AEM url with POST, it looks for resource(page, external url etc) if recourse does not found then default sling post servlet get called and created the nodes and properties.

So when node is created, AEM able to find local sling resourec and redirection to SSO stopped working.

https://sling.apache.org/documentation/bundles/manipulating-content-the-slingpostservlet-servlets-post.html

 

 

1 reply

arunpatidar
Community Advisor
arunpatidarCommunity AdvisorAccepted solution
Community Advisor
August 16, 2020

Hi,

I am not sure why SSO stop working and instead of node is created but when you make a request to any AEM url with POST, it looks for resource(page, external url etc) if recourse does not found then default sling post servlet get called and created the nodes and properties.

So when node is created, AEM able to find local sling resourec and redirection to SSO stopped working.

https://sling.apache.org/documentation/bundles/manipulating-content-the-slingpostservlet-servlets-post.html

 

 

Arun Patidar
    V
    VikashyadavAuthor
    Level 3
    August 17, 2020

    Hi Arun,

    Thanks for your quick response. As part of this AEM node creation, what are the properties are associated with that created node? In my case, the created node has only one property i.e. jcr:primaryType. Does default sling post servlet create jcr:created, jcr:createdBy properties for that node?

    Thanks.

     

    Terms & ConditionsAccessibility statement

    Loading footer...