Expand my Community achievements bar.

Don’t miss the AEM Skill Exchange in SF on Nov 14—hear from industry leaders, learn best practices, and enhance your AEM strategy with practical tips.

Could not able to login in using SAML Authentication handler in AEM

Avatar

Level 2

I have configured SAML authentication handler in my local AEM server and followed below steps.

1. "Create KeyStore" and upload "LDP certificate" using Admin user

2. "Create KeyStore" using Admin credential in authentication-service user

2. Configure the SAML authentication handler in the web console using updated IDP URL, IDP Certificate Alias & Service Provider Entity ID.

3. Configure Referrer Filter and updated "Allow Hosts" URL and check  option for "Allow Empty" option

4. Configure  a Logger for SAML using "Apache Sling Logging Logger Configuration" configuration.

when hit http://localhost:4502 i can able to navigate on websso IDP login URL but when i trying to login i am getting Logon failure message and could not able to login successfully.

When i check SAML logs i got "Private key of SP not provided: Cannot sign Auth request." please find below log details.

03.02.2018 11:53:04.610 *DEBUG* [qtp1311169174-278] com.adobe.granite.auth.saml.SamlAuthenticationHandler Private key of SP not provided: Cannot sign Authn request.

03.02.2018 11:53:26.233 *DEBUG* [qtp1311169174-2015] com.adobe.granite.auth.saml.SamlAuthenticationHandler Private key of SP not provided: Cannot sign Authn request.

03.02.2018 11:56:24.438 *DEBUG* [qtp1311169174-2015] com.adobe.granite.auth.saml.SamlAuthenticationHandler Private key of SP not provided: Cannot sign Authn request.

03.02.2018 11:57:24.727 *DEBUG* [qtp1311169174-278] com.adobe.granite.auth.saml.SamlAuthenticationHandler Private key of SP not provided: Cannot sign Authn request.

03.02.2018 11:58:15.444 *DEBUG* [qtp1311169174-276] com.adobe.granite.auth.saml.SamlAuthenticationHandler Private key of SP not provided: Cannot sign Authn request.

Request you to please help!!!!

1 Reply

Avatar

Level 10

Refer to this GEMS Session on working with SAML - it will point you in the correct direction: Utilizing SAML in AEM deployments