[jira] [Commented] (FEDIZ-236) Geeting HTTP 401 error on first login using SAML

["Raj (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FEDIZ-236?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16758366#comment-16758366 ] 

Raj commented on FEDIZ-236:
---------------------------

thanks [~coheigea] for you response . I did the setup on TOMCAT8 and have 1 new issue https://issues.apache.org/jira/browse/FEDIZ-237

Can you comment on that ?? 

> Geeting HTTP 401 error on first login using SAML 
> -------------------------------------------------
>
>                 Key: FEDIZ-236
>                 URL: https://issues.apache.org/jira/browse/FEDIZ-236
>             Project: CXF-Fediz
>          Issue Type: Bug
>          Components: Plugin
>    Affects Versions: 1.4.5
>         Environment: # ISAM ( IBM ) as an IDP 
>  # Tomcat as JVM container
>            Reporter: Raj
>            Assignee: Colm O hEigeartaigh
>            Priority: Major
>              Labels: SAML, wctx
>             Fix For: 1.4.6
>
>
> Hello 
> I recently used FEDIZ plugin on tomcat for 1 basic JAVA application . MY config is 
>  # ISAM ( IBM ) as an IDP 
>  # Tomcat as JVM container
> After configuring the FEDIZ , The request goes to IDP --> I get login page --> After successful login request gets to tomcat again with proper SAML response but I get HTTP 401 ERROR on browser . If I again enter the URL on same opened webpage I can access the application . 
>  
> On analyzing the FEDIZ code I saw this 
> {{ _protected void resumeRequest(HttpServletRequest request, HttpServletResponse response)_}}
> {{ _throws IOException_}}
> {{ _{_}}
> {{ _String contextId = request.getParameter("wctx");_}}
> {{ _if (contextId == null)_}}
> {{ _{_}}
> {{ _LOG.warn("The 'wctx' parameter has not been provided back with signin request.");_}}
> {{ _response.sendError(401);_}}
> {{ }}}
>  
> I cheeked the Jira dashboard  and saw that there was some discussion saying that the IDP must pass the wctx  parameter as well in the SAML response . 
> Is it really true ??  , because my ISAM ( IDP ) is not currently passing any thing like this . Do I just have to pass it as an attribute in the SAML response ?? Or is there any other way to get it working . 
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)