31.3 Troubleshooting Identity Server and Authentication

Section 31.3.1, Useful Networking Tools for Linux Identity Server

Section 31.3.2, Troubleshooting 100101043 and 100101044 Liberty Metadata Load Errors

Section 31.3.3, Authentication Issues

Section 31.3.4, After Setting Up the User Store to Use SecretStore, Users Report 500 Errors

Section 31.3.5, When Multiple Browser Logout Option Is Enabled, User Is Not Getting Logged Out from Different Sessions

Section 31.3.6, After Consuming a SAML Response, the Browser Is Redirected to an Incorrect URL

Section 31.3.7, Configuring SAML 1.1 Identity Provider Without Specifying Port in the Login URL Field

Section 31.3.8, Attributes Are Not Available Through Form Fill When OIOSAML Is Enabled

Section 31.3.9, Issue in Importing Metadata While Configuring Identity Provider or Service Provider Using Metadata URL

Section 31.3.10, Metadata Mentions Triple Des As Encryption Method

Section 31.3.11, Issue in Accessing Protected Resources with External Identity Provider When Both Providers Use Same Cookie Domain

Section 31.3.12, SAML Intersite Transfer URL Setup Does Not Work for Non-brokered Setups after Enabling SP Brokering

Section 31.3.13, Orphaned Identity Objects

Section 31.3.14, Users Cannot Log In to Identity Server When They Access Protected Resources with Any Contract Assigned

Section 31.3.15, An Attribute Query from OIOSAML.SP Java Service Provider Fails with Null Pointer

Section 31.3.16, Disabling the Certificate Revocation List Checking

Section 31.3.17, Step Up Authentication for Identity Server Initiated SSO to External Provider Does Not Work Unless It has a Matching Local Contract

Section 31.3.18, Metadata Cannot be Retrieved from the URL

Section 31.3.19, Authentication Request to a Service Provider Fails

Section 31.3.20, SAML 2.0 POST Compression Failure Does Not Throw a Specific Error Code

Section 31.3.21, SAML 1.1 Service Provider Re-requests for Authentication

Section 31.3.22, Identity Server Statistics Logs Do Not Get Written In Less Than One Minute

Section 31.3.23, No Error Message Is Written in the Log File When an Expired Certificate Is Used for the X509 Authentication

Section 31.3.24, Terminating an Existing Authenticated User from Identity Server

Section 31.3.25, X.509 Authentication Lists the Entire List of Certificates Imported to the Browser

Section 31.3.26, Clustered Nodes Looping Due to JGroup Issues

Section 31.3.27, Authentication With Aliases Fails

Section 31.3.28, nidp/app Does Not Redirect to nidp/portal after Authentication

Section 31.3.29, Login to Office 365 Fails when WS-Trust MEX Metadata Is Larger than 65 KB

Section 31.3.30, Unsafe Server Certificate Change in SSL/TLS Renegotiations Is Not Allowed

Section 31.3.31, Viewing Request and Response Headers of All Protocols in a Log File

Section 31.3.32, Provisioning of LDAP Attribute for Social Authentication User Failed

Section 31.3.33, User Authentication Fails When the Advanced Authentication Generic Class Is Used

Section 31.3.34, The Advanced Authentication Chains Are Not Displayed When Creating a Method with Advanced Authentication Generic Class