[JIRA] (JENKINS-50367) SAMLException: Identity provider has no single sign on service available for the selected

[andre.i...@bbraun.com (JIRA)]

Title: Message Title

Andre Iske created an issue   Jenkins / JENKINS-50367 SAMLException: Identity provider has no single sign on service available for the selected Issue Type: Bug Assignee: Ivan Fernandez Calvo Attachments: Exception_Screenhot.png, Exception_StackTrace.txt, log_login_from_Jenkins_with_execption.txt, Log_Working_Login_with_URL_and_following_redirect.txt, metadata.xml, SAML_Config_Screenshot.png Components: saml-plugin Created: 2018-03-23 12:40 Environment: Jenkins ver. 2.107.1 SAML Plugin ver. 1.0.5 openjdk version "1.8.0_151" Alpine Linux v3.7.0 Labels: jenkins plugin SAML SAMLException Priority: Minor Reporter: Andre Iske I have a problem setting up SAML authentication. I'm not sure if it's a misconfiguration or a bug, but without the help of an expert, I can't get the problem solved. As soon as I activate SAML authentication, I get the following exception on the login page: org.pac4j.saml.exceptions.SAMLException: Identity provider has no single sign on service available for the selected profileorg.opensaml.saml.saml2.metadata.impl.IDPSSODescriptorImpl@628767f5 at org.pac4j.saml.context.SAML2MessageContext.getIDPSingleSignOnService(SAML2MessageContext.java:93) (See full Stack Trace in attachments) If I call up the login URL ([https://idp.[CompanyName].com/idp/startSSO.ping?PartnerSpId=Jenkins.PRD:SAML2]) from the SAML server directly in my browser, I get a http login request and after entering the access data correctly I am forwarded to my Jenkins (where I am successfully logged in). So basically the SAML authentication works. But unfortunately not from Jenkins directly. I will attach all SAML settings to this ticket. I'm also attaching a recording from the Jenkins log. There I created a log recorder with the following log levels: org.jenkinsci.plugins.saml -> FINEST. org.pac4j -> FINE. I hope someone can help me identify the problem. Add Comment   This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.