On Mon, Jan 31, 2022 at 02:51:15PM -0500, Joshua Kim wrote: > My dev site uses Dspace 7.1 and Shibboleth authentication. I am new to > Shibboleth. SP and IP are set up (shibboleth related xml files correctly). > It passes the Shibboleth single sign on authentication but on my site, it > says "Authentication failed!". Can someone help me out with this? > > The DSpace log says > 2022-01-31 14:44:41,525 ERROR unknown unknown > org.dspace.authenticate.ShibAuthentication @ Shibboleth authentication was > not able to find a NetId, Email, or Tomcat Remote user $ > 2022-01-31 14:44:41,531 ERROR unknown unknown > org.dspace.authenticate.ShibAuthentication @ Unable to register new eperson > beca > use we are unable to find an email address along with first and last name > for the user. > NetId Header: 'SHIB-NETID'='null' (Optional) > Email Header: 'SHIB-MAIL'='null' > First Name Header: 'SHIB-GIVENNAME'='null' > Last Name Header: 'SHIB-SURNAME'='null' > 2022-01-31 14:44:41,533 INFO unknown unknown > org.dspace.app.rest.security.EPersonRestAuthenticationProvider @ > anonymous::failed_login:email=null, result=4 > 2022-01-31 14:44:41,536 ERROR unknown unknown > org.dspace.app.rest.security.StatelessLoginFilter @ Authentication failed > (status:401) > org.springframework.security.authentication.BadCredentialsException: Login > failed
I would carefully check the SP configuration, specifically 'attribute-map.xml'. You need to talk to the people who run the IDP and find out what labels they used for the user's given name, surname, email address and unique identifier. These should be mapped to the request header names that DSpace is expecting: SHIB-GIVENNAME, SHIB-SURNAME, SHIB-MAIL, and SHIB-NETID using 'Attribute' elements in 'attribute-map.xml'. Different organizations may use different attribute names to refer to the same user qualities in their IDP configurations, so you need to map the ones your organization is using. -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/YfhWD1MSnF6abkPO%40IUPUI.Edu.
signature.asc
Description: PGP signature
