user_saml icon indicating copy to clipboard operation
user_saml copied to clipboard

Can't login with Saml

Open Dozecloud-llc opened this issue 6 years ago • 8 comments

Account not provisioned. Your account is not provisioned, access to this service is thus not possible.

-->

Steps to reproduce

1.login

Server configuration

Operating system: Ubuntu

**Web server: nginx 1.17.8

**Database: mysql

**PHP version: 7.4

**Nextcloud version: 18.0.0 __ My IDP is Auth0

Logs

Nextcloud log (data/owncloud.log)

Insert your Nextcloud log here

Error | index | OneLogin\Saml2\Error: Invalid array settings: idp_entityId_not_found |   | 2020-02-05T09:27:05-0800
-- | -- | -- | -- | --
Fatal | user_saml | IDP parameter for the UID (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) not found. Possible parameters are: ["http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/nameidentifier","http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/emailaddress","http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/name","http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/upn","http:\/\/schemas.auth0.com\/identities\/default\/connection","http:\/\/schemas.auth0.com\/identities\/default\/provider","http:\/\/schemas.auth0.com\/identities\/default\/isSocial","http:\/\/schemas.auth0.com\/picture","http:\/\/schemas.auth0.com\/nickname","http:\/\/schemas.auth0.com\/email_verified","http:\/\/schemas.auth0.com\/clientID","http:\/\/schemas.auth0.com\/updated_at","http:\/\/schemas.auth0.com\/created_at"] |   | 2020-02-05T09:25:10-0800
Fatal | user_saml | IDP parameter for the UID (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) not found. Possible parameters are: ["http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/nameidentifier","http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/emailaddress","http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/name","http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/upn","http:\/\/schemas.auth0.com\/identities\/default\/connection","http:\/\/schemas.auth0.com\/identities\/default\/provider","http:\/\/schemas.auth0.com\/identities\/default\/isSocial","http:\/\/schemas.auth0.com\/picture","http:\/\/schemas.auth0.com\/nickname","http:\/\/schemas.auth0.com\/email_verified","http:\/\/schemas.auth0.com\/clientID","http:\/\/schemas.auth0.com\/updated_at","http:\/\/schemas.auth0.com\/created_at"]



Dozecloud-llc avatar Feb 05 '20 17:02 Dozecloud-llc

What are your attribute mappings for the SP (Nextcloud) and IdP? Also, what IdP are you using?

reavessm avatar Feb 26 '20 13:02 reavessm

image

My IDP is Auth0

Dozecloud-llc avatar Mar 02 '20 05:03 Dozecloud-llc

@reavessm

Dozecloud-llc avatar Mar 17 '20 17:03 Dozecloud-llc

What are the mappings on the Identity Provider (IdP) side? Also what IdP are you using?

reavessm avatar Mar 17 '20 17:03 reavessm

@reavessm You already asked once and got an answer to both questions.

alerque avatar May 14 '21 18:05 alerque

@alerque you showed the mappings in Nextcloud but not auth0. I'm also not super familiar with auth0 so idk if I can help anyway

reavessm avatar May 14 '21 18:05 reavessm

I wasn't the OP here, and I don't use Auth0. I do see now that you asked them for 3 things and only got 2 back, but you clearly asked for some duplicate info again which didn't seem right.

My issue is with Keycloak (not Auth0) and confusingly I can't even find the SP (Nextcloud) mappings as shown in this screen shot. I just don't have those options.

alerque avatar May 15 '21 09:05 alerque

{"reqId":"-------","level":4,"time":"2022-12-05T18:36:51+00:00","remoteAddr":"---------","user":"--","app":"user_saml","method":"POST","url":"/apps/user_saml/saml/acs","message":"IDP parameter for the UID not found. Possible parameters are: [\"username\",\"password\",\"displayName\",\"email\"]","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"24.0.7.1","data":{"app":"user_saml"}}

This is my log on the same error on the browser, I set email as IDP on the app and on the server with simplesaml.

Mte90 avatar Dec 06 '22 13:12 Mte90