SAML error with reason: user_sync_failed detected

Avatar

Avatar

divyav15815834

Avatar

divyav15815834

divyav15815834

28-01-2021

Hi,

 

On our production servers, I see a huge no of SAML logins failing, redirecting the user to the error screen. From the logs, I can see the user node getting created, but while syncing the attributes there is some error. Can you please help me understand why we are seeing this error and how can this be fixed?

 

error.log

27.01.2021 23:55:42.206 *INFO* [qtp1673272307-651804] com.adobe.granite.security.user.internal.audit.AuditAuthorizableAction User 'XXXXXXXXXXXXXXXXXXX' was created

 

saml.log

27.01.2021 23:55:45.125 *ERROR* [qtp1673272307-651804] org.apache.sling.auth.core.impl.SlingAuthenticator doLogin: Cannot login: Response already committed
27.01.2021 23:55:45.125 *INFO* [qtp1673272307-651804] com.adobe.granite.auth.saml.SamlAuthenticationHandler SAML error with reason: user_sync_failed detected, redirect user to: /libs/granite/core/content/login.error.html?j_reason=user_sync_failed
27.01.2021 23:55:45.125 *INFO* [qtp1673272307-651804] com.adobe.granite.auth.saml.SamlAuthenticationHandler SAML error with reason: user_sync_failed detected, redirect user to: /libs/granite/core/content/login.error.html?j_reason=user_sync_failed
27.01.2021 23:55:44.896 *ERROR* [qtp1673272307-651804] com.adobe.granite.auth.saml.extidp.DefaultUserSync User synchronization failed: Could not access repository.
javax.jcr.nodetype.ConstraintViolationException: OakConstraint0004: /home/groups/K/KHEjZa0UrKlT0dw4RxGz/rep:membersList/18305[[rep:MemberReferences]]: No matching property definition found for rep:members = [26c907ba-960c-3a7d-8ce5-d717227b43fb, 66cfa1d8-526e-3757-9ceb-02fd8db8d647, c153fdc8-a54a-3ff1-bd55-8eb9600cec9f, 0661a354-f728-3c59-9571-e6726c0136c0, 1cbfdcd3-dcaa-36aa-977d-5ed374688d49, 91f93622-d9cb-3579-978a-2be87305fbc1, f4301db8-c06a-3aa7-8243-5f47e10b25c0, fe2b745b-7101-38a0-9add-0bbb88baac73, 5c6e7a72-2ba4-3c9f-b3c2-db2fd5ad9546, 9af17a85-3399-3a7f-a1b5-7121deaa38d3, 1281f194-d4f1-34fb-b9b1-96fd9f6422e4, 5bfc30f3-21fb-38f8-8bcd-9c7feb2e45db, 5d32c6d5-8537-30ed-a5e8-c6855fb79429, 30c67302-209c-37bb-8bb3-4a1b098d1d1e, 533b3f3f-cf25-3b7a-957e-b2ab84ceda44, 3d9be250-810b-3aa1-b571-6033a4933aef, eee08dc3-e393-36c1-8d6c-45c0a1f5bf1b, 823ee619-e2c3-3e9d-9725-54591be7a247, 4c459264-177b-390f-8ef2-0301e66b1780, 0c4570b8-e046-3006-83e6-f94c0a1b5978, 0c53a24e-b930-3506-92c3-edff97468229, 9e8fc455-63e5-377a-ac9a-258820eb68e5, 9b7c2cba-f8a4-3867-8989-63b87221b2b1, 637aa4de-2517-3263-bbfb-9386904cd6b7, 11093757-0b90-31a4-be94-fe10a0e07cc3, eb2b1357-b741-3db0-839e-0e9235321d01, 7fe02147-b6ef-3ac4-9448-b87a5a329ed0, b5be9fef-ee3b-368b-b344-c0ebfa823131, 67eaec0d-ada0-3b57-accd-91202005fab6, ae73bcd4-4958-3d81-931a-6e83338b33ed, 4995fd4c-0b51-33e5-9090-2c53150b921e, 927a5ae5-48b6-3934-ab02-34383d63b64a, fe48bbe7-0669-34a9-8a2f-c91e9dc179da, b70c4e74-3a8f-3e09-b3a1-5e5e0c65c9fe, d53590e1-bab7-3646-8c6c-89a8cdad9582, 10afbe84-25cc-3dd8-961a-f77f9e524618, ba67cc3e-384a-3a86-b622-4a742f59589b, 4d4a64e2-841f-39ab-abcd-bc655245b2ee, e8c834ea-3d39-3a23-8d7f-404d9f7c7a1e, c1ceb436-4c0f-3cfc-a9bf-16af39f77fca, f658d57d-0711-33d4-87e3-62275c5a25eb, 55e8bdd6-7992-3d3d-9c55-5b566d52df61, d80971fe-0be8-3782-996f-eab920ebe948, 2dd60e32-bcfe-3f3a-b63c-7c3c0c5d1b1a, 47dd3774-9bfd-3218-82db-53ae3b8c5c1f, a0780fe8-e2db-3118-b0cc-9f9a9ed3d552, 4194597a-ac24-33c6-8195-318e04b56f5e, 14de3872-1226-3ec0-9f7c-d5560147c7d0, 0005c443-ed44-3591-a302-66043a6dfbfc, 309d2258-f4c8-3b51-a4d6-15986ccfd5d4, 43d66da3-1364-347f-b04f-7119f3f8e684, 57cd223b-c2b7-31d2-925f-18c7ac3d8cf4, 56fb39c6-0b7d-3e96-889a-06f41a873d08, 9b7f0f39-b030-3a6a-8dca-1cea6e586ba4, d125da3d-58e9-3605-8a84-bc4f2b20864b, e181c361-b986-3934-a20c-2b8c9a0bacc7, e5c40669-07cc-3741-9560-bf5372856345]

 

Thanks,

Divya

AEM AEM 6.4 SAML2.0 saml_login SSO User groups

Accepted Solutions (1)

Accepted Solutions (1)

Avatar

Avatar

Vijayalakshmi_S

MVP

Avatar

Vijayalakshmi_S

MVP

Vijayalakshmi_S
MVP

28-01-2021

Hi @divyav15815834,

I was able to pull related thread for your issue - https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/no-matching-property-defin...

Note : 6.4.8 has the Oak version updated to 1.8.20

Answers (0)