Unable to change SSO Certificate for Confluence

Question

Hello!

We have an old Confluence server (on-prem) thats using SAML2.0 SSO with Azure as IDP.

Our SAML signing certificate expired 2 days ago & we have created a new certificate and set it to active.

After restarting Confluence we're still having problems signing into Confluence.

Were getting an error message saying

Please ensure XML Metadata is correct or contact your Azure AD admin.

I cant find anywhere where i can change the settings for this SSO, either disable it so we can access Confluence.

Anybody have any idea how to resolve this? Can we change the config back to basic auth somewhere in the files/Database?

Martn Andersson · Answer

Thanks, i will try this!

Ed Letifov _TechTime - New Zealand_ · Answer

Hello, @Martn Andersson

If this is Server, SAML SSO is provided by one of these apps: https://marketplace.atlassian.com/search?product=confluence&query=SAML

You can start Confluence with all apps disabled and uninstall the app, see: https://confluence.atlassian.com/confkb/how-to-manually-remove-malfunctioning-add-ons-113705118.html

Or you log in into your https://my.atlassian.com where you should be able to find a license that corresponds to the app, to identify which app it is.

Then you can either:

- look into documentation linked from the Marketplace listing (even if by now it's for a Data Center version), as most of the apps support some form of URL parameter to fall back to the regular login page
- reach out to the vendor to ask about the above
- disable just this app via startup parameter
- disable the app by updating the database

If this happens to be our EasySSO for Confluence – just append "?stopsso=1" to the URL

And don't hesitate to reach out to our 24x7 support if needed via Service Desk or chat on the website