Unknown state in response

Question

We're trying to setup SSO on our Bitbucket DC instance with OIDC and we're seeing this error after logging in on our IDp(Keycloak).

com.atlassian.plugins.authentication.impl.web.usercontext.AuthenticationFailedException: Unknown state in response

Does anymore have more info on the error?

The stack trace is

com.atlassian.plugins.authentication.impl.web.usercontext.AuthenticationFailedException: Unknown state in response
	at com.atlassian.plugins.authentication.impl.web.oidc.OidcConsumerServlet.lambda$doGet$0(OidcConsumerServlet.java:103)
	at java.base/java.util.Optional.orElseThrow(Optional.java:408)
	at com.atlassian.plugins.authentication.impl.web.oidc.OidcConsumerServlet.doGet(OidcConsumerServlet.java:103)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:634)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
	at com.atlassian.plugin.servlet.DelegatingPluginServlet.service(DelegatingPluginServlet.java:37)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
	at com.atlassian.plugin.servlet.ServletModuleContainerServlet.service(ServletModuleContainerServlet.java:46)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)

Joe Red · Answer

I am getting this error after a user as already been into the application. Now they cannot get in and the logs are saying Unknown State in Response.

Any help?

Laurent s_pkf8f0 · Answer

hi

i've got same problem with confluence and Cas Apero OIDC. I'm not sure what to write in "username claim"

i try with {sub} or {id} or something else, and i"ve always the same error

a solution for someone ?

Reab · Answer

@esk I'm facing this issue, were you able to solve it?