SSO Errors

[akhilraj]

Hi,

We are getting below errors when we do a performance test with 800 users after SSO SAML integration.

Functionalities are working fine.

10.10.2022 04:46:36.100 *ERROR* [qtp925298346-1857] org.apache.sling.auth.core.impl.SlingAuthenticator doLogin: Cannot login: Response already committed
10.10.2022 04:46:36.088 *ERROR* [qtp925298346-100] com.adobe.granite.auth.saml.extidp.DefaultUserSync User synchronization failed: Could not access repository.
javax.jcr.InvalidItemStateException: OakState0001: Unresolved conflicts in /home/users/6/64WwgJBe21O17S39-5J9

org.apache.jackrabbit.oak.spi.security.authentication.external.impl.ExternalLoginModule No IDP found with name e6897caa09f6514a8bfcaec6b5a3d05f. Will not be used for login

Any idea ?

[Chandra_Hire]

Hi @akhilraj 

Looks like the permissions for the authentication-service user have been lost during performance testing. The authentication-service user is missing its permissions for the /home folder. Please try using the below solution.

SAML authentication loops and fails with "Access denied." (adobe.com)

[akhilraj]

Hi @Chandra_Hire,

Thank you, but we have same permission already available.

[akhilraj]

[Chandra_Hire]

Can you check the permission for this user 

/home/users/6/64WwgJBe21O17S39-5J9

[Chandra_Hire · Accepted solution]

Is exception given for only this user /home/users/6/64WwgJBe21O17S39-5J9 or there are more users having conflicts? If not, I would suggest removing the user and try login again so that through SAML configuration, user will be synced again in AEM and resolve the conflict.

[akhilraj]

Usual access is not creating an issue.

When we do performance test with more users then we are getting the issue, otherwise it is fine.

[Chandra_Hire]

Since SSO SAML is working fine for manually accessing the fewer users. In order to further analysis on the issue (just to check possibility of number of concurrent users/number of users in the performance testing is the root cause). Can you please try to reduce the concurrent users and/or number of users from 800 to 500 may be.

Did you also check that this is the only user causing issue or many, also what point the test fails I mean after login of 100 users etc. ?