Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

saml not working because of clientid not being send(?) #10577

Open
f1-outsourcing opened this issue Nov 15, 2024 · 1 comment
Open

saml not working because of clientid not being send(?) #10577

f1-outsourcing opened this issue Nov 15, 2024 · 1 comment
Labels
Type: Bug Bugs within the core SuiteCRM codebase

Comments

@f1-outsourcing
Copy link

Issue

[[C2024-11-15 21:18:14,160 WARN [org.keycloak.events] (executor-thread-4) type="LOGIN_ERROR", realmId="a2a87471-45ee-400d-b064-8e51666e337d", realmName="xxxxxx", clientId="null", userId="null", ipAddress="192.168.123.90", error="client_not_found", reason="Cannot_match_source_hash"

Possible Fix

add clientid to the password form and send it.

Steps to Reproduce the Issue

Probably need newer saml server to see this error, maybe new in saml2 specification?

Context

No response

Version

7.14.6

What browser are you currently using?

Firefox

Browser Version

No response

Environment Information

mysql php8.2

Operating System and Version

nvm

@f1-outsourcing f1-outsourcing added the Type: Bug Bugs within the core SuiteCRM codebase label Nov 15, 2024
@f1-outsourcing
Copy link
Author

 46 error_log('>>>'.$spBase);
 47 $settingsInfo = array (
 48     'sp' => array (
 49         'entityId' => 'xxxxxxxx',
 50         'assertionConsumerService' => array (
 51             'url' => $spBase,
 52         ),
 53         'singleLogoutService' => array (
 54             'url' => $spBase,
 55         ),
 56         'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
 57     ),
 58     'idp' => array (
 59         'entityId' => 'xxxxxxxx',
 60         'singleSignOnService' => array (

If I change the code like this and xxxxx matches my clientid in keycloak, I am proceeding further in the process.

I have the impression that either suitecrm or keycloak is not following a standard.

https://stackoverflow.com/questions/24196369/what-to-present-at-saml-entityid-url

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Bug Bugs within the core SuiteCRM codebase
Projects
None yet
Development

No branches or pull requests

1 participant