After logging in IDP through SAML auth IDP POST to /login URL returns gets into redirect loop between Sign in URL and IDP URL

[andrija_sm]

SAML Authentication configured by following this guide:

https://wttech.blog/blog/2019/how-to-setup-aem-publish-saml-authentication-using-okta

After logging in IDP the POST request to configured sign in URL enters into in a continuous loop

from http://aem-publish-host/content/......./login.html

to https://your-id.okta.com/home/your-id_aempublishlocalhost_1/0oa1ltmftpUq7m9X2357..../SAML

...

The end user is never directed to the requested landing page.

I am not able to find anything in saml.logs, any advice for investigation?

Thanks,

[Himanshu_Jain]

Check dispatcher settings as well .

[andrija_sm]

Thanks,

Dispatcher has a filter configured to allow POST request on given path 

/0111 { /type "allow" /method "POST" /url "*/login.html" } # allow post for SAML

[aanchal-sikka]

@andrija_sm :

Sometimes after we change the SAML settings the infinite loop occurs. Can you try restarting the server?

Also, please assure that you only have a valid SAML configuration, please delete the ones not in use.

[milind_bachani]

Hi @andrija_sm ,

https://experienceleague.adobe.com/docs/experience-cloud-kcs/kbarticles/KA-17476.html?lang=en

Can you have a look at the above pasted reference which has troubleshooting steps for SAML issues that generally happen.

Regards,
Milind 

[Himanshu_Jain]

Check value of your ACS URL field as well .