Hello @cshawaus - I was able to compile the SamlAuthenticationFilter.java file into SamlAuthenticationFilter.class. How should I install this into AEM for testing?    Thanks!

@cshawaus Thanks for the additional info about multiple consumer URLs. I'll check with the IdP administrator about doing the redirect there. When you said: I had a feeling that the redirect behaviour might not be within the control of AEM - did you mean because the IdP is doing it? I don't think the...

Here's what happened after the IdP team changed the consumer URL from https://author/saml_login to https://author/foo/saml_login and after I updated the protected path to /foo in the SAML config as well as changing the redirect to /aem/start.html.   /foo redirects to the IdP, after successful authen...

We have SAML authentication working on AEM Author 6.5 SP13. Users can visit the author at https://author and are redirected to the IdP. On successful authentication at the IdP, they get redirected back to https://author and are logged in. I have the need to use SAML authentication not on the default...

Hi @SantoshSai Thanks for the info - Unfortunately I will need to rely on cURL until the underlying issue is resolved.    I'm not sure how the links you included will help with my issue?   Can you advise on what we might look for in the code to resolve?   We are using a -SNAPSHOT bundle throughout t...

Hi Avinash, Thank you for the info, it seems to work! Interestingly, Adobe Support said you could not refresh a bundle like this via cURL  Do you have any idea why this is necessary in our case? Ideally the code would come back properly between restarts of the AEM instance. This will make thing...

AEM 6.5 SP13 We have a code bundle with a search component that is in a failed state when the instance is restarted. Looking around /system/console we see what looks like a conflict with jersey client / jersey core libraries when it's broken (i.e. after instance is restarted). So far, I have d...

It seems the indexcopier warnings will go away once the index is rebuilt?The warning logs don't mention it's being rebuilt but I think that may be happening as the warnings are not repeated (for me) on subsequent restarts of AEM.My particular warning was on a relatively newly created index and on an...

Hi Ravi,  I believe all of the calls are anonymous, we're not doing any authenticated content on the publish/dispatcher side. Some forms may be submitted, but nothing is submitted back to AEM. Thanks for your input.  

 I understand the csrf token should not be cached at the dispatcher level. How does this play out when a CDN is in front of the dispatcher? Is it OK for the CDN to cache the csrf token? Would that be a likely configuration by default? Should we instead configure the CDN to forward the tokens back to...