SAML 2.0 Authentication Handler - Rejected empty referrer header

[qath]

hello everyone, 

I configured SAML 2.0 Authentication Handler on AEM 6.5 following https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/saml-2-0-authen... for we-retail and i'm getting a 

20.02.2023 21:32:26.547 *INFO* [qtp927739593-1970] org.apache.sling.security.impl.ReferrerFilter Rejected empty referrer header for POST request to /content/we-retail.html

I see the post entering with all data and when i activate the allows empty option at apache filter, the localhost:4503/content/we-retail.html reloads multiple times. Is there any configuration that i'm missing?

Thanks in advance

[ChitraMadan]

Hi @qath ,

This error is is due to the Apache Sling Referrer Filter will not allow empty Referrer address by default.

For testing purpose, you can allow empty referrer by changing the Apache Sling Referrer Filter.

Apache Sling Referrer Filter configuration

Go to the Felix Console - http://localhost:4502/system/console/configMgr

Search for "Apache Sling Referrer Filter"

Select "Allow Empty"

This should be only enabled for testing purpose.

[qath]

thanks @ChitraMadan but i tried that too and the /content/we-retail.html reloads multiple times, I starting to think that the AEM page has no complete info of all places that are needed to configure.

[andrija_sm]

I am facing exactly the same issues. Was this ever resolved?

Thanks,

[qath]

Solved with:

Apache Sling Referrer Filter"

Select "Allow Empty"

[andrija_sm]

Thanks, but how is the multiple reloading - from /content/we-retail.html to saml login page resolved?

[qath]

Yes, you need to check all the configuration params, in my case was because my accertion url should be a /saml_login one.

For logger works correctly you should Configure a Logger for SAML

[fprogrammer]

Hi, I have got the same problem but before i check this mark im wondering for what reason it is not checked in from the start. What problems could this lead to if i check it?