We updated JIRA from 8.5.7 – 8-18.2 and upgraded Confluence from 6-15-7 – 7.49
Now SSO doesn’t work and shows anonymous in the logs.
LOGS SHOW:
2021-09-22 11:20:49,448 WARN [http-nio-8090-exec-11] [microsoft.saml.util.Util] base64encoded MS_WARN : Before base 64 encoding::<?xml version="1.0" encoding="UTF-8"?><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" AssertionConsumerServiceURL=https://ocioconfluence-test.doe.gov/confluence/plugins/servlet/saml/auth Destination=https://login.microsoftonline.com/6b183ecc-4b55-4ed5-b3f8-7f64be1c4138/saml2 ForceAuthn="false" ID="MSSSO_08238a94-91d2-44b4-aa32-47fd32127641" IsPassive="false" IssueInstant="2021-09-22T11:20:49Z" Version="2.0"><saml:Issuer>https://ocioconfluence-test.doe.gov/confluence/</saml:Issuer></samlp:AuthnRequest>
-- referer: https://ocioconfluence-test.doe.gov/confluence/login.action?errorOccured=User+is+not+available+in+Confluence.+Please+contact+your+Confluence+admin. | url: /confluence/plugins/servlet/saml/auth | traceId: 982a414452bea4b5 | userName: anonymous
2021-09-22 11:20:49,449 WARN [http-nio-8090-exec-11] [microsoft.saml.util.Util] base64encoded MS_WARN : After base 64 encoding::PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbHA6QXV0aG5SZXF1ZXN0IHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIEFzc2VydGlvbkNvbnN1bWVyU2VydmljZVVSTD0iaHR0cHM6Ly9vY2lvY29uZmx1ZW5jZS10ZXN0LmRvZS5nb3YvY29uZmx1ZW5jZS9wbHVnaW5zL3NlcnZsZXQvc2FtbC9hdXRoIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tLzZiMTgzZWNjLTRiNTUtNGVkNS1iM2Y4LTdmNjRiZTFjNDEzOC9zYW1sMiIgRm9yY2VBdXRobj0iZmFsc2UiIElEPSJNU1NTT18wODIzOGE5NC05MWQyLTQ0YjQtYWEzMi00N2ZkMzIxMjc2NDEiIElzUGFzc2l2ZT0iZmFsc2UiIElzc3VlSW5zdGFudD0iMjAyMS0wOS0yMlQxMToyMDo0OVoiIFZlcnNpb249IjIuMCI+PHNhbWw6SXNzdWVyPmh0dHBzOi8vb2Npb2NvbmZsdWVuY2UtdGVzdC5kb2UuZ292L2NvbmZsdWVuY2UvPC9zYW1sOklzc3Vlcj48L3NhbWxwOkF1dGhuUmVxdWVzdD4=
2021-09-22 11:20:49,450 WARN [http-nio-8090-exec-11] [microsoft.saml.util.Util] prepareAuthnRequest MS_WARN : Target generated is:https://login.microsoftonline.com/6b183ecc-4b55-4ed5-b3f8-7f64be1c4138/saml2?SAMLRequest=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbHA6QXV0aG5SZXF1ZXN0IHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIEFzc2VydGlvbkNvbnN1bWVyU2VydmljZVVSTD0iaHR0cHM6Ly9vY2lvY29uZmx1ZW5jZS10ZXN0LmRvZS5nb3YvY29uZmx1ZW5jZS9wbHVnaW5zL3NlcnZsZXQvc2FtbC9hdXRoIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tLzZiMTgzZWNjLTRiNTUtNGVkNS1iM2Y4LTdmNjRiZTFjNDEzOC9zYW1sMiIgRm9yY2VBdXRobj0iZmFsc2UiIElEPSJNU1NTT18wODIzOGE5NC05MWQyLTQ0YjQtYWEzMi00N2ZkMzIxMjc2NDEiIElzUGFzc2l2ZT0iZmFsc2UiIElzc3VlSW5zdGFudD0iMjAyMS0wOS0yMlQxMToyMDo0OVoiIFZlcnNpb249IjIuMCI+PHNhbWw6SXNzdWVyPmh0dHBzOi8vb2Npb2NvbmZsdWVuY2UtdGVzdC5kb2UuZ292L2NvbmZsdWVuY2UvPC9zYW1sOklzc3Vlcj48L3NhbWxwOkF1dGhuUmVxdWVzdD4=
2021-09-22 11:20:49,969 ERROR [http-nio-8090-exec-7] [microsoft.saml.util.SignatureValidator] validate MS_INFO : SignatureValidator started to validate signature tags
-- referer: https://login.microsoftonline.com/ | url: /confluence/plugins/servlet/saml/auth | traceId: b5944bc2aaab2de4 | userName: anonymous
2021-09-22 11:20:49,971 ERROR [http-nio-8090-exec-7] [microsoft.saml.util.SignatureValidator] validate MS_INFO : SignatureValidator Completed validation of signature tags
2021-09-22 11:20:49,972 WARN [http-nio-8090-exec-7] [microsoft.saml.util.XMLUtility] validateSignNode MS_WARN : certificate found in signature
2021-09-22 11:20:49,976 ERROR [http-nio-8090-exec-7] [atlassianplugin.confluence.servlet.ConfluenceSSOLoginServlet] authenticateUserAndLogin MS_ERROR : User is not available in Confluence. Please contact your Confluence admin :6GM2SDgs8w4-etWa9iB8BDoSv4SfA-qbtr2D3P1L330
2021-09-22 11:20:49,983 ERROR [http-nio-8090-exec-7] [microsoft.atlassianplugin.applicationinsight.ApplicationInsightUtil] logException MS_ERROR : Exception message = User is not available in Confluence. Please contact your Confluence admin.
tenantID = 6b183ecc-4b55-4ed5-b3f8-7f64be1c4138
appID = 9cb91197-9d25-4067-9fc8-b131e1b6e5f8
userID = 6GM2SDgs8w4-etWa9iB8BDoSv4SfA-qbtr2D3P1L330
thanks for the details. If you perform Quick Test, what results do you get ? just to make sure that the username/password is correct so that sync can work.
Hi @Jim Logan The error says "User is not available in Confluence." Have you verified if the user exists in the confluence user directory ? It's not working for all users or just few users ?
Hi @Kishan Sharma ,
The users exist in the confluence directory and it works for me and nobody else.
Thanks for confirming Jim. If you go to User directories, can you test the directory sync ? when was it last successful ?
- Test user rename is configured and tracked : The Unique ID Attribute has been left blank. We recommend you set this to the attribute for the UUID of the user.
- Test user can authenticate : Not performed
Test Remote Directory ConnectionTest Remote Directory ConnectionUse this form to test the connection to Atlassian Crowd directory 'Remote JIRA Directory'.
For extended testing enter the credentials of a user in the remote directory.
Test basic connection : SucceededTest retrieve user : SucceededTest user rename is configured and tracked : The Unique ID Attribute has been left blank. We recommend you set this to the attribute for the UUID of the user.Test get user's memberships : Succeeded, 9 groups retrievedTest retrieve group : SucceededTest get group members : Succeeded, 19 users retrievedTest user can authenticate : Not performedUser namejames.loganPassword••••••••••••••••••••••••••Back to directory list
Great, so you have got this working now already ?
It looks like you're new here. Sign in or register to get started.
