-
Bug
-
Resolution: Not A Defect
-
Minor
-
Jenkins ver. 2.107.1
SAML Plugin ver. 1.0.5
openjdk version "1.8.0_151"
Alpine Linux v3.7.0
I have a problem setting up SAML authentication. I'm not sure if it's a misconfiguration or a bug, but without the help of an expert, I can't get the problem solved.
As soon as I activate SAML authentication, I get the following exception on the login page:
org.pac4j.saml.exceptions.SAMLException: Identity provider has no single sign on service available for the selected profileorg.opensaml.saml.saml2.metadata.impl.IDPSSODescriptorImpl@628767f5
at org.pac4j.saml.context.SAML2MessageContext.getIDPSingleSignOnService(SAML2MessageContext.java:93)
(See full Stack Trace in attachments)
If I call up the login URL (https://idp.[CompanyName].com/idp/startSSO.ping?PartnerSpId=Jenkins.PRD:SAML2) from the SAML server directly in my browser, I get a http login request and after entering the access data correctly I am forwarded to my Jenkins (where I am successfully logged in). So basically the SAML authentication works. But unfortunately not from Jenkins directly.
I will attach all SAML settings to this ticket. I'm also attaching a recording from the Jenkins log. There I created a log recorder with the following log levels:
org.jenkinsci.plugins.saml -> FINEST.
org.pac4j -> FINE.
I hope someone can help me identify the problem.