[
https://issues.apache.org/jira/browse/FEDIZ-236?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh closed FEDIZ-236.
-------------------------------------
> Geeting HTTP 401 error on first login using SAML
> -------------------------------------------------
>
> Key: FEDIZ-236
> URL: https://issues.apache.org/jira/browse/FEDIZ-236
> Project: CXF-Fediz
> Issue Type: Bug
> Components: Plugin
> Affects Versions: 1.4.5
> Environment: # ISAM ( IBM ) as an IDP
> # Tomcat as JVM container
> Reporter: Raj
> Assignee: Colm O hEigeartaigh
> Priority: Major
> Labels: SAML, wctx
> Fix For: 1.4.6
>
>
> Hello
> I recently used FEDIZ plugin on tomcat for 1 basic JAVA application . MY
> config is
> # ISAM ( IBM ) as an IDP
> # Tomcat as JVM container
> After configuring the FEDIZ , The request goes to IDP --> I get login page
> --> After successful login request gets to tomcat again with proper SAML
> response but I get HTTP 401 ERROR on browser . If I again enter the URL on
> same opened webpage I can access the application .
>
> On analyzing the FEDIZ code I saw this
> {{ _protected void resumeRequest(HttpServletRequest request,
> HttpServletResponse response)_}}
> {{ _throws IOException_}}
> {{ _{_}}
> {{ _String contextId = request.getParameter("wctx");_}}
> {{ _if (contextId == null)_}}
> {{ _{_}}
> {{ _LOG.warn("The 'wctx' parameter has not been provided back with signin
> request.");_}}
> {{ _response.sendError(401);_}}
> {{ }}}
>
> I cheeked the Jira dashboard and saw that there was some discussion saying
> that the IDP must pass the wctx parameter as well in the SAML response .
> Is it really true ?? , because my ISAM ( IDP ) is not currently passing any
> thing like this . Do I just have to pass it as an attribute in the SAML
> response ?? Or is there any other way to get it working .
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
