saml_login not found 404 | Community
Skip to main content
rajeevy89244319
Level 3
December 11, 2017
Solved

saml_login not found 404

  • December 11, 2017
  • 8 replies
  • 8159 views

i am trying to configure sso in aem 6.3. After IDP is redirecting to /saml_login url on aem, i am getting 404 error. In aem logs I can see below messages:

08.12.2017 17:15:18.244 *INFO* [CM Event Dispatcher (Fire ConfigurationEvent: pi                                                                             d=com.adobe.granite.auth.saml.SamlAuthenticationHandler)] com.adobe.granite.auth                                                                             .saml Service [com.adobe.granite.auth.saml.SamlAuthenticationHandler,59547, [org                                                                             .apache.sling.auth.core.spi.AuthenticationHandler]] ServiceEvent REGISTERED

08.12.2017 17:15:42.778 *DEBUG* [qtp1363622188-331043] com.adobe.granite.auth.sa                                                                             ml.SamlAuthenticationHandler Could not retrieve SP's private key: Uninitialised                                                                              key store for user authentication-service

I have added the idp public store in trust store and added alias on saml handler. Need suggestion on what could be the issue here.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by MC_Stuff

Hi Rajjev,

  It might be blocked at dispatcher level. Verify the filter to allow for /saml_login.   Can you send debug logs of com.adobe.granite.auth.saml?

Thanks,

8 replies

smacdonald2008
Level 10
December 11, 2017

So community can attempt to reproduce your issue, please point to the online doc you are following.

smacdonald2008
Level 10
December 11, 2017

Also - watch this GEMS session on SAML and AEM - it may be beneficial to solving this issue -- Utilizing SAML in AEM deployments

rajeevy89244319
Level 3
December 11, 2017

Thanks Sam. I noticed that password is not getting setup on authentication-service trust store. It is showing error message - Some error occured when setting the password.

MC_Stuff
Level 10
December 12, 2017

Hi Rajeev,

   Sounds you have registered to different path. At com.adobe.granite.auth.saml.SamlAuthenticationHandler configure path to /

Thanks,

rajeevy89244319
Level 3
December 12, 2017

HI MC,

Path is / in SamlAuthenticationHandler configuration.

rajeevy89244319
Level 3
December 12, 2017

Hi Sam,

In dispatcher logs, I can see below message

Filter rejects: POST /saml_login

I have added idp domain in referral filter. Do we need to do anything additional at dispatcher on aem instance to allow saml_login POST requests?

March 31, 2022

Hi @rajeevy89244319 , did you get solution of this issue?

rajeevy89244319
Level 3
December 12, 2017

Once i have allowed post request to /saml_login, it is now throwing 403 forbidden error.

MC_Stuff
MC_StuffAccepted solution
Level 10
December 13, 2017

Hi Rajjev,

  It might be blocked at dispatcher level. Verify the filter to allow for /saml_login.   Can you send debug logs of com.adobe.granite.auth.saml?

Thanks,