SAML 2.0 not working with JIRA 7.5.3 (Tomcat 8.5)

[David Fallert]

Hey Guys,

we are trying to update our Jira instance from 6.4.13 to 7.5.3 worked fine so far.

Our problem here is that our SAML implementation doesn't work anymore.

The session is correct, if I login in our identity management (login URL) and open 

http://hostname:8080/jira I get logged in correctly.

Now here is the Problem if I want to get redirected from our identity management to our Jira Server I get a 500 Error. Looks like the Tomcat Connector is not listening correctly.

I'm not exactly sure which Infos are important to provide. Just ask and I will add them.

server.xml Connector

<Connector port="8080"

maxThreads="150"
minSpareThreads="25"
connectionTimeout="20000"

enableLookups="false"
maxHttpHeaderSize="8192"
protocol="HTTP/1.1"
useBodyEncodingForURI="true"
redirectPort="8443"
acceptCount="100"
disableUploadTimeout="true"

URIEncoding="UTF-8"
scheme="https"
proxyName="www.mycompany.de"
proxyPort="443"/>

Thanks in advance

[David Fallert · Accepted solution]

Cause:

We did some research with a "tamper" plug-in and found out that our Web Server Proxy Plug-In wasn't ready for Tomcat 8.5.6

Workaround:

We removed the Configuration from the plug-in and added it directly to the "mod_proxy" now everthing works fine :)

[somethingblue]

Hi David,

• What SAML provider are you using, e.g. Okta, OneLogin, etc.?

The first thing I would do is review Adding SAML integration to your existing user management infrastructure and verify everything is setup correctly in that regard.

Once you have verified this take a look in your catalina.out and see if you can identify any errors and we can go from there.

Cheers,

Branden

[David Fallert]

Hi Branden,

sorry for the late reply. Hope you had great holidays.

• we have a custom implementation of a SAML provider

in the catalina.out nothing really happens at all.

Greets,

David