Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-50367

SAMLException: Identity provider has no single sign on service available for the selected

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not A Defect
    • Icon: Minor Minor
    • saml-plugin
    • Jenkins ver. 2.107.1
      SAML Plugin ver. 1.0.5
      openjdk version "1.8.0_151"
      Alpine Linux v3.7.0

      I have a problem setting up SAML authentication. I'm not sure if it's a misconfiguration or a bug, but without the help of an expert, I can't get the problem solved.

      As soon as I activate SAML authentication, I get the following exception on the login page:

      org.pac4j.saml.exceptions.SAMLException: Identity provider has no single sign on service available for the selected profileorg.opensaml.saml.saml2.metadata.impl.IDPSSODescriptorImpl@628767f5
      	at org.pac4j.saml.context.SAML2MessageContext.getIDPSingleSignOnService(SAML2MessageContext.java:93)
      

      (See full Stack Trace in attachments)

      If I call up the login URL (https://idp.[CompanyName].com/idp/startSSO.ping?PartnerSpId=Jenkins.PRD:SAML2) from the SAML server directly in my browser, I get a http login request and after entering the access data correctly I am forwarded to my Jenkins (where I am successfully logged in). So basically the SAML authentication works. But unfortunately not from Jenkins directly.

      I will attach all SAML settings to this ticket. I'm also attaching a recording from the Jenkins log. There I created a log recorder with the following log levels:

      org.jenkinsci.plugins.saml -> FINEST.
      org.pac4j -> FINE.

      I hope someone can help me identify the problem.

            ifernandezcalvo Ivan Fernandez Calvo
            andre_ Andre Iske
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: