SAML 2.0 Authentication Handler - Rejected empty referrer header | Community
Skip to main content
February 20, 2023

SAML 2.0 Authentication Handler - Rejected empty referrer header

  • February 20, 2023
  • 1 reply
  • 2417 views

hello everyone, 

I configured SAML 2.0 Authentication Handler on AEM 6.5 following https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/saml-2-0-authenticationhandler.html?lang=en for we-retail and i'm getting a 

20.02.2023 21:32:26.547 *INFO* [qtp927739593-1970] org.apache.sling.security.impl.ReferrerFilter Rejected empty referrer header for POST request to /content/we-retail.html

I see the post entering with all data and when i activate the allows empty option at apache filter, the localhost:4503/content/we-retail.html reloads multiple times. Is there any configuration that i'm missing?

Thanks in advance

 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

1 reply

ChitraMadan
Community Advisor
Community Advisor
February 22, 2023

Hi @arroyo_guzmanka ,

 

This error is is due to the Apache Sling Referrer Filter will not allow empty Referrer address by default.
 
For testing purpose, you can allow empty referrer by changing the Apache Sling Referrer Filter.

Apache Sling Referrer Filter configuration

Search for "Apache Sling Referrer Filter"
Select "Allow Empty"

 

This should be only enabled for testing purpose.
 
 
February 22, 2023

thanks @chitramadan but i tried that too and the /content/we-retail.html reloads multiple times, I starting to think that the AEM page has no complete info of all places that are needed to configure.

 

 

March 9, 2023

I am facing exactly the same issues. Was this ever resolved?

 

Thanks,