Zurück
-
Titel
SAML login fails due to "Error loading certificate from properties" -
Beschreibung
After completing configurations for SAML authentication and selecting the SSO Login option on the login screen, error "SAML login failed" is displayed.
The following errors are present in the Foglight Management Server logs:
ERROR [http-exec-10] com.onelogin.saml2.settings.SettingsBuilder - Error loading certificate from properties.
java.security.cert.CertificateException: Could not parse certificate: java.io.IOException: Illegal footer: -----ENDCERTIFIC
ERROR [http-exec-10] com.onelogin.saml2.settings.Saml2Settings - idp_cert_or_fingerprint_not_found_and_required
ERROR [http-exec-10] com.onelogin.saml2.Auth - Invalid settings: idp_cert_or_fingerprint_not_found_and_required
ERROR [http-exec-10] com.quest.nitro.webconsole.auth.saml.SamlFilter - An unexpected error occurred which may cause undesired behavior. You may want to contact customer support if you see this error again: SAML login failed, Invalid settings: idp_cert_or_fingerprint_not_found_and_required
java.lang.Exception: Stack Trace -
Ursache
Incorrect format for the Identity Provider signing certificate in the SAML 2.0 SSO configuration. -
Lösung
From the Foglight Web Interface, verify that the Identity Provider x.509 Signing Certificate under Administration > User & Security Management > SAML 2.0 SSO matches the one obtained from the Identity Provider and has the correct format.
The certificate must include the delimiter strings "-----BEGIN CERTIFICATE-----" on the first line and "-----END CERTIFICATE-----" on the last line.