Difference between revisions of "Troubleshooting Single Sign On"
Line 19: | Line 19: | ||
|} | |} | ||
== Common Issues == | == Common Issues == | ||
+ | [[File:certificateExpiryError.jpg|400px|thumb|<div align="center">'''This error message indicates that the certificate given to Hornbill by your identity provider does not match any of the certificates currently stored in the Hornbill SSO Profile. '''</div>]] | ||
+ | ===The public certificate used for signing the assertion is not known to the service provider=== | ||
− | + | A common symptom of this error message is the expiry or renewal of an ADFS Server signing certificate. By default, the ADFS '''AutoCertificateRollover''' property is set to true so the certificates could change automatically without any direct action. This error message indicates that the certificate given to Hornbill by the identity provider does not match any of the certificates currently stored in the Hornbill SSO Profile. | |
− | + | ====Corrective Action==== | |
+ | This can be rectified by uploading a new certificate key to the Hornbill SSO Profile. Please contact the security or administration team within your company to request for a refreshed ADFS Server certificate key. | ||
+ | <br> | ||
+ | As a general principle, we advise that the team responsible for security or administration within your company can schedule a task to update the Hornbill SSO profile with the new certificates, prior to their expiry. | ||
− | + | For instructions on how to upload a new signing certificate (identity provider meta data) into Hornbill, click the following link: [[Single_Sign_On_Profiles|'''Single Sign on Profiles''']] | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− |
Revision as of 16:18, 4 January 2019
Home > Integration > Essential Integrations > Single Sign On with SAML 2.0 > Trouble Shooting Single Sign On
IntroductionHornbill's Single Sign On implementation is designed to present you with helpful error messages in situations where something may not be quite right. This page outlines the common scenarios and what to do to overcome them.
|
Related Articles |
Common Issues
The public certificate used for signing the assertion is not known to the service provider
A common symptom of this error message is the expiry or renewal of an ADFS Server signing certificate. By default, the ADFS AutoCertificateRollover property is set to true so the certificates could change automatically without any direct action. This error message indicates that the certificate given to Hornbill by the identity provider does not match any of the certificates currently stored in the Hornbill SSO Profile.
Corrective Action
This can be rectified by uploading a new certificate key to the Hornbill SSO Profile. Please contact the security or administration team within your company to request for a refreshed ADFS Server certificate key.
As a general principle, we advise that the team responsible for security or administration within your company can schedule a task to update the Hornbill SSO profile with the new certificates, prior to their expiry.
For instructions on how to upload a new signing certificate (identity provider meta data) into Hornbill, click the following link: Single Sign on Profiles