Is there any way to see detailed logs in the cloud, to solve my SSO problems

[Charlie Cramm]

Hello everyone,

I have added SAML SSO and activated an auth policy to enable and use SSO. I use keycloak and when I try to log in it redirects me to keycloak and I log in and it redirects me back. But then I get the following error:

Is there any way to get a more detailed error message that tells me exactly why it's having trouble? I remember vaguely that back in the on-prem datacenter edition days you could log in to you server and use a string like this:

a9bd4595-599f-4ead-b831-46ecd388cb1c

to search in the logs and get a more detailed view of the problem.

Is there any way to do the same in cloud cause the only thing I see are the audit logs and they are not helpful.

Ill also share my mappers in keycloak in case my mistake is there. Thanks in advance!

[Hector Menchaca · Accepted solution]

Hello @Charlie Cramm ,

Welcome to Atlassian Community!

Can you please attach a screenshot of the error with the browser URL included?

If you can do that for us I will be able to help or identify the problem.

Best Regards,

Thanks!

[Charlie Cramm]

Hey @Hector Menchaca

Of course:

 https://id.atlassian.com/error?error=access_denied&error_description=Invalid%20thumbprint&state=eyJjc3JmVG9rZW4iOiIwYmI3MjBiYy0zZGY1LTRmMDItOWQ2Yi01NjBjMzdmZTM1OWYiLCJhbm9ueW1vdXNJZCI6ImE5YmQ0NTk1LTU5OWYtNGVhZC1iODMxLTQ2ZWNkMzg4Y2IxYyIsImNvbnRpbnVlVXJsIjoiaHR0cHM6Ly9zdGFydC5hdGxhc3NpYW4uY29tLz91dG1fc291cmNlPWlkZW50aXR5IiwicXVlcnkiOiI_Y29ubmVjdGlvbj1zYW1sLTY0YTFlNDgyLTcyZTgtNDRiMi1iNTY5LTgzYjg0YzhlZTFjYyJ9

[Hector Menchaca]

@Charlie Cramm 

Thanks for your reply!

That error tells us that the certificate is expired, to renew it please follow the next steps:

• 1. Go to admin.atlassian.com<http://admin.atlassian.com/> and select your organization.
• 2. Go to Identity Providers and open your SAML configuration
• 3. Go to your IdP Dashboard and download a new x64 certificate.
• 4. Go to your SAML Configuration and update the x509 certificate field with the new certificate.

[Charlie Cramm]

Hey @Hector Menchaca

Yes thank you it works now.

And I'll thank you once more for your speedy responses.