SAML Identity provider - Infinite loop

[maximilian_queh]

Hello,

I authenticate my website with an external Identity- Provider (IdP) and I am using the SAML- Protocol.
The process is that if a URL is invoked, a redirect is done to the IdP (HTTP-GET), if authentication was successful, IdP does a redirect to AEM 5.6 (HTTP-POST).
And for any reason I run into an infinite loop with the following logging at the bottom.
Actually I don't know what does

    org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials

mean. Does anyone know what I can do in order to prevent the infinite loop.
Thanks a lot!

07.01.2015 10:29:04.835 *INFO* [10.17.37.3 [1420622944835] GET /content/mywebsite.html HTTP/1.1] org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials ------------------- infinite request ----------------- 07.01.2015 10:30:07.775 *INFO* [10.17.37.3 [1420623007772] POST /content/mywebsite.html HTTP/1.1] org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials 07.01.2015 10:30:08.213 *INFO* [10.17.37.3 [1420623008211] POST /content/mywebsite.html HTTP/1.1] org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials 07.01.2015 10:30:08.662 *INFO* [10.17.37.3 [1420623008657] POST /content/mywebsite.html HTTP/1.1] org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials 07.01.2015 10:30:09.120 *INFO* [10.17.37.3 [1420623009117] POST /content/mywebsite.html HTTP/1.1] org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials

.... infiite loop

[Lokesh_Shivalingaiah · Accepted solution]

Hi Max,

  Check if this helps http://adobeaemclub.com/setting-saml-authentication/

[maximilian_queh]

bsloki wrote...

Hi Max,

  Check if this helps http://adobeaemclub.com/setting-saml-authentication/

Two things did it:

1. I added /saml_login at IdP for consumer URL (for redirect to Service Provider)

2. required SAML Attributes at AEM and delivered SAML Attributes of IdP didn't match

Afterwards everything works fine.

Thanks for help!

[uagnihotri]

This link doesn't work anymore

[estout021]

This and every other link on this site.