Error in SSO OIDC Integration

[Iyana Garry]

Below are log events from Jira when the error occurred:

2024-05-06 09:24:14,860-0400 https-openssl-nio-443-exec-20 url: /plugins/servlet/oidc/initiate-login; user: [username] WARN [username] 564x75x1 v7ysb1 [IP address] /plugins/servlet/oidc/initiate-login [c.a.p.a.i.web.oidc.InitiateLoginServlet] IDP initiated OIDC flow: could not retrieve IDP config for issuer [IdP URL]

2024-05-06 09:24:14,861-0400 https-openssl-nio-443-exec-20 url: /plugins/servlet/oidc/initiate-login; user: [username] ERROR [username] 564x75x1 v7ysb1 [IP address] /plugins/servlet/oidc/initiate-login [c.a.p.a.i.web.filter.ErrorHandlingFilter] [UUID: a033f453-6941-400b-a52d-b6e0c25a71e1] Login flow initiated by unknown issuer: [IdP URL]
com.atlassian.plugins.authentication.impl.web.usercontext.AuthenticationFailedException: Login flow initiated by unknown issuer: [IdP URL]
at com.atlassian.plugins.authentication.impl.web.oidc.InitiateLoginServlet.fetchOidcConfigByIssuer(InitiateLoginServlet.java:93)
at com.atlassian.plugins.authentication.impl.web.oidc.InitiateLoginServlet.doGet(InitiateLoginServlet.java:63)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:529)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
at com.atlassian.plugin.servlet.DelegatingPluginServlet.service(DelegatingPluginServlet.java:37)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
at com.atlassian.plugin.servlet.ServletModuleContainerServlet.service(ServletModuleContainerServlet.java:49)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
... 48 filtered
at com.atlassian.diagnostics.internal.platform.monitor.http.HttpRequestMonitoringFilter.doFilter(HttpRequestMonitoringFilter.java:54)
... 8 filtered
at com.atlassian.plugins.authentication.impl.web.filter.ErrorHandlingFilter.doFilterInternal(ErrorHandlingFilter.java:79)
at com.atlassian.plugins.authentication.impl.web.filter.AbstractJohnsonAwareFilter.doFilter(AbstractJohnsonAwareFilter.java:29)
... 3 filtered
at com.atlassian.web.servlet.plugin.request.RedirectInterceptingFilter.doFilter(RedirectInterceptingFilter.java:21)
... 20 filtered
at org.kantega.atlaskerb.intercept.filter.AtlasKerberosMainAuthFilter.doFilter(AtlasKerberosMainAuthFilter.java:129)
... 3 filtered
at org.kantega.atlaskerb.intercept.filter.AtlasKerberosMainAuthFilter.doFilter(AtlasKerberosMainAuthFilter.java:129)
... 31 filtered
at com.atlassian.oauth2.scopes.web.ReadWriteScopeFilter.doFilter(ReadWriteScopeFilter.java:46)
... 3 filtered
at com.atlassian.troubleshooting.thready.filter.AbstractThreadNamingFilter.doFilter(AbstractThreadNamingFilter.java:46)
... 17 filtered
at com.atlassian.jira.security.JiraSecurityFilter.lambda$doFilter$0(JiraSecurityFilter.java:66)
... 1 filtered
at com.atlassian.jira.security.JiraSecurityFilter.doFilter(JiraSecurityFilter.java:64)
... 16 filtered
at com.atlassian.pats.web.filter.TokenBasedAuthenticationFilter.doFilter(TokenBasedAuthenticationFilter.java:82)
... 3 filtered
at com.atlassian.oauth2.provider.core.web.AccessTokenFilter.doFilter(AccessTokenFilter.java:82)
... 7 filtered
at org.kantega.atlaskerb.intercept.filter.AtlasKerberosMainAuthFilter.doFilter(AtlasKerberosMainAuthFilter.java:129)
... 3 filtered
at org.kantega.atlaskerb.intercept.filter.AtlasKerberosMainAuthFilter.doFilter(AtlasKerberosMainAuthFilter.java:129)
... 3 filtered
at org.kantega.atlaskerb.intercept.filter.AtlasKerberosMainAuthFilter.doFilter(AtlasKerberosMainAuthFilter.java:158)
... 3 filtered
at org.kantega.atlaskerb.intercept.filter.AtlasKerberosPreFilter.doFilter(AtlasKerberosPreFilter.java:110)
... 19 filtered
at com.atlassian.jira.servermetrics.CorrelationIdPopulatorFilter.doFilter(CorrelationIdPopulatorFilter.java:30)
... 5 filtered
at com.atlassian.plugins.authentication.impl.web.filter.loginform.DisableNativeLoginAuthFilter.doFilter(DisableNativeLoginAuthFilter.java:55)
... 3 filtered
at com.atlassian.plugins.authentication.impl.basicauth.filter.DisableBasicAuthFilter.doFilter(DisableBasicAuthFilter.java:70)
... 3 filtered
at org.kantega.atlaskerb.intercept.filter.AtlasKerberosPreFilter.doFilter(AtlasKerberosPreFilter.java:280)
... 8 filtered
at com.atlassian.web.servlet.plugin.request.RedirectInterceptingFilter.doFilter(RedirectInterceptingFilter.java:21)
... 4 filtered
at com.atlassian.troubleshooting.thready.filter.AbstractThreadNamingFilter.doFilter(AbstractThreadNamingFilter.java:46)
... 3 filtered
at com.atlassian.web.servlet.plugin.LocationCleanerFilter.doFilter(LocationCleanerFilter.java:36)
... 7 filtered
at org.kantega.atlaskerb.security.SecurityHeadersFilter.doFilter(SecurityHeadersFilter.java:72)
... 3 filtered
at org.kantega.atlaskerb.msteams.MsTeamsSecurityHeadersFilter.doFilter(MsTeamsSecurityHeadersFilter.java:52)
... 25 filtered
at com.atlassian.jira.servermetrics.MetricsCollectorFilter.doFilter(MetricsCollectorFilter.java:25)
... 25 filtered
at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
at java.base/java.lang.Thread.run(Unknown Source)