Expand my Community achievements bar.

Enhance your AEM Assets & Boost Your Development: [AEM Gems | June 19, 2024] Improving the Developer Experience with New APIs and Events

After logging in IDP through SAML auth IDP POST to /login URL returns gets into redirect loop between Sign in URL and IDP URL

Avatar

Level 2

SAML Authentication configured by following this guide:

https://wttech.blog/blog/2019/how-to-setup-aem-publish-saml-authentication-using-okta

 

After logging in IDP the POST request to configured sign in URL enters into in a continuous loop

from http://aem-publish-host/content/......./login.html

to https://your-id.okta.com/home/your-id_aempublishlocalhost_1/0oa1ltmftpUq7m9X2357..../SAML

andrija_sm_0-1678349157304.png

...

 

The end user is never directed to the requested landing page.

I am not able to find anything in saml.logs, any advice for investigation?

 

Thanks,

 

 

 

5 Replies

Avatar

Community Advisor

Check dispatcher settings as well .

Himanshu Jain

Avatar

Level 2

Thanks,

Dispatcher has a filter configured to allow POST request on given path 

/0111 { /type "allow" /method "POST" /url "*/login.html" } # allow post for SAML

Avatar

Community Advisor

@andrija_sm :

Sometimes after we change the SAML settings the infinite loop occurs. Can you try restarting the server?

Also, please assure that you only have a valid SAML configuration, please delete the ones not in use.


Aanchal Sikka

Avatar

Employee Advisor

Hi @andrija_sm ,

https://experienceleague.adobe.com/docs/experience-cloud-kcs/kbarticles/KA-17476.html?lang=en

Can you have a look at the above pasted reference which has troubleshooting steps for SAML issues that generally happen.

Regards,
Milind 

Avatar

Community Advisor

Check value of your ACS URL field as well .

Himanshu Jain