nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

OpenID - "Oops - an error has occurred"

Daniel_syfd63

I'm trying to setup OID with Amazon Cognito. I setup everything as needed but when I open Confluence and login with the SSO details, I get the following error:

Cause

java.lang.NullPointerException
    at com.atlassian.plugins.authentication.impl.web.oidc.OidcConsumerServlet.doGet(OidcConsumerServlet.java:114)

Googling around I found some similar errors but their solutions didn't apply to my case, at least not as far as I know.

Any help would be appreciated

Accepted answers

Thiago Masutti

Hi @Daniel
Welcome to the Atlassian Community.

If you check the application logs you may have an error related to this issue, together with a stack trace.

Could you please paste that here?

Kind regards,
Thiago Masutti

Danny Rehelis_nacu5l

Hey @Thiago Masutti

Just wanted to drop-in and update we've managed to overcome this,

What if you create the same user in the Confluence internal directory, disable JIT provisioning and try the authentication?

This definitely worked.

JIT user provisioning failed for us due to the fact the the local user Cognito pool we were testing with, users were not part of any group. Once a group was created and populated with users, JIT provisioning worked and we've managed to log-in!

Thanks a bunch for the help!

All comments

Thiago Masutti

Hi @Daniel
Welcome to the Atlassian Community.

If you check the application logs you may have an error related to this issue, together with a stack trace.

Could you please paste that here?

Kind regards,
Thiago Masutti

Daniel_syfd63

Thanks @Thiago Masutti

Stack Trace:[hide]java.lang.NullPointerException at com.atlassian.plugins.au - Pastebin.com

Thiago Masutti

Can you paste a screenshot of the OIDC configuration in Confluence?
You may redact some information if needed.

Daniel_syfd63

Sure thing @Thiago Masutti

SBXgR9L

Danny Rehelis_nacu5l

Hey @Thiago Masutti

Just wanted to drop-in and update we've managed to overcome this,

What if you create the same user in the Confluence internal directory, disable JIT provisioning and try the authentication?

This definitely worked.

Thanks a bunch for the help!

Kourtney Barnes_2h9n5v

Hey @Danny Rehelis , I'm having this exact same issue. For the group field what value are you putting there.

I'm getting

We can't log you in right now

Please contact your administrator.

Technical details

Could you tell me what values you are putting for the JIT fields? Below is what I have setup.

Display Name :: ${given_name} ${family_name}

Email :: ${email}

Groups :: cognito:groups

JIT Scopes :: profile email

Danny Rehelis_nacu5l

Hey @Kourtney Barnes , on our setup, `JIT scopes` is left empty.

I'd suggest enabling stack trace information in the error pages to understand what is behind that `Technical details` error.

https://confluence.atlassian.com/enterprise/saml-single-sign-on-for-atlassian-data-center-applications-857050705.html#SAMLsinglesign-onforAtlassianDataCenterapplications-authenticationscreen

(at the very bottom)

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

confluence-server

sso

openid

cognito