By: Joel Potts user 20 Jul 2016 at 5:17 a.m. CDT

3 Responses
Joel Potts gravatar
After doing a fresh install on a new server, SCIM is not working again. I followed the steps of fixing it as I did last time, however I still get errors. The error I am getting is a "HTTP Status 500 - gluu.scim.client.exception.ScimInitializationException: Could not get accessToken" The oxauth.log shows: ``` 2016-07-20 09:49:26,531 INFO [org.xdi.oxauth.auth.AuthenticationFilter] JWT authentication failed: Invalid authentication method org.xdi.oxauth.model.exception.InvalidJwtException: Invalid authentication method at org.xdi.oxauth.model.token.ClientAssertion.load(ClientAssertion.java:109) at org.xdi.oxauth.model.token.ClientAssertion.<init>(ClientAssertion.java:39) at org.xdi.oxauth.auth.AuthenticationFilter.processJwtAuth(AuthenticationFilter.java:324) at org.xdi.oxauth.auth.AuthenticationFilter.access$100(AuthenticationFilter.java:62) at org.xdi.oxauth.auth.AuthenticationFilter$1.process(AuthenticationFilter.java:85) at org.jboss.seam.servlet.ContextualHttpServletRequest.run(ContextualHttpServletRequest.java:65) at org.xdi.oxauth.auth.AuthenticationFilter.doFilter(AuthenticationFilter.java:76) at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) at org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) at org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90) at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) at org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) at org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) at org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:423) at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:625) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:316) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) at java.lang.Thread.run(Thread.java:745) ``` SCIM Support has been enabled in the configuration and I got the scim-rp-openid-keys.json file when I did the fresh install. To the best of my knowledge the client is configured the same as before (unfortunately we do not have access to the previous installation to check for sure).

By Mohib Zico Account Admin 20 Jul 2016 at 5:22 a.m. CDT

Mohib Zico gravatar
Joel, Which version you are using? 2.4.3 or 2.4.4 beta?

By Joel Potts user 20 Jul 2016 at 5:25 a.m. CDT

Joel Potts gravatar
Hi, I am using 2.4.3

By Joel Potts user 20 Jul 2016 at 5:42 a.m. CDT

Joel Potts gravatar
The issue has been resolved. I was using the wrong scim_rp_client_id, correcting this has fixed the issues.