After Consuming a SAML Response, the Browser Is redirected to an Incorrect URL. NetIQ 4.2

Troubleshooting Identity Server and Authentication

This section provides information about the following topics:

“Useful Networking Tools for Linux Identity Server” on page 982

“Troubleshooting 100101043 and 100101044 Liberty Metadata Load Errors” on page 982

“Authentication Issues” on page 989

“After Setting Up the User Store to Use SecretStore, Users Report 500 Errors” on page 991

“When Multiple Browser Logout Option Is Enabled, User Is Not Getting Logged Out from

Different Sessions” on page 991

“After Consuming a SAML Response, the Browser Is redirected to an Incorrect URL” on page 992

“Configuring SAML 1.1 Identity Provider Without Specifying Port in the Login URL Field” on page 992

“Attributes Are Not Available Through Form Fill When OIOSAML Is Enabled” on page 992

“Issue in Importing Metadata While Configuring Identity Provider or Service Provider Using

Metadata URL” on page 992

“Metadata Mentions Triple Des As Encryption Method” on page 993

“Issue in Accessing Protected Resources with External Identity Provider When Both Providers

Use Same Cookie Domain” on page 993

“SAML Intersite Transfer URL Setup Does Not Work for Non-brokered Setups after Enabling SP

Brokering” on page 993

“Orphaned Identity Objects” on page 993

“Users cannot Log In to Identity Provider When They Access Protected Resources With Any

Contract Assigned” on page 994

“Attribute Query from OIOSAML.SP Java Service Provider Fails with Null Pointer” on page 994

“Disabling the Certificate Revocation List Checking” on page 994

“Step up Authentication for the Identity Server Initiated SSO to External Provider Does not Work

Unless It has a Matching Local Contract” on page 995

“Metadata Cannot be Retrieved from the URL” on page 995

“Requesting the Authentication to a Service Provider Fails” on page 995

“SAML 2.0 POST Compression Failure Does not Throw a Specific Error Code” on page 995

“SAML 1.1 Service Provider Re-requests for Authentication” on page 995

“The Identity Server Statistics Logs Do Not Get Written In Less Than One Minute” on page 996

“No Error Message Is Written in the Log File When an Expired Certificate Is Used for the X509

Authentication” on page 996

“Terminating an Existing Authenticated User from the Identity Server” on page 996

“X.509 Authentication Lists the Entire List of Certificates Imported to the Browser” on page 997

“Clustered Nodes Looping Due to JGroup Issues” on page 997

“Authentication With Aliases Fails” on page 998

“nidp/app Does Not Redirect to nidp/portal after Authentication” on page 998

“Login to Office 365 Fails when WS-Trust MEX Metadata Is Larger than 65 KB” on page 998

“Unsafe Server Certificate Change in SSL/TLS Renegotiations Is Not Allowed” on page 999

“Viewing Request and Response Headers of All Protocols in a Log File” on page 999

Troubleshooting

981