infinite loop to GLUU Identity Appliance UI after login into SSO enabled site

By: Filip Van Tittelboom user 25 Jan 2016 at 5:59 a.m. CST

4 Responses
Filip Van Tittelboom gravatar
I have the following behavior: When I log successfully into an SSO-enabled site (different Openid Connect config for every site) and then go to the GLUU Identity Appliance UI, the latter gets into an infinite loop. I don't have an issue between other SSO enabled sites. If I go first to the GLUU Identity Appliance UI and then to an SSO enabled site there is no issue either. I encountered this issue on version 2.4.0-2. Recently upgraded (apt-get upgrade) to 2.4.1-1.
None
closed

Answers

By Mohib Zico staff 25 Jan 2016 at 6:20 a.m. CST

Copy
Mohib Zico gravatar
Tailing oxauth log will give us the reason of this behavior.

By Filip Van Tittelboom user 25 Jan 2016 at 8:32 a.m. CST

Copy
Filip Van Tittelboom gravatar
Get something like this: ``` 2016-01-25 13:33:24,434 ERROR [xdi.oxauth.authorize.ws.rs.AuthorizeAction] There is already existing session which has another acr then basic, session: xxx-xxx-xxx-xxx 2016-01-25 13:33:24,434 ERROR [xdi.oxauth.authorize.ws.rs.AuthorizeAction] Please perform logout in order to be able login with new ACR value. 2016-01-25 13:33:24,434 TRACE [xdi.oxauth.authorize.ws.rs.AuthorizeAction] permissionDenied 2016-01-25 13:33:24,434 DEBUG [org.xdi.oxauth.model.error.ErrorResponseFactory] Looking for the error with id: access_denied 2016-01-25 13:33:24,434 DEBUG [org.xdi.oxauth.model.error.ErrorResponseFactory] Found error, id: access_denied ```

By Michael Schwartz Account Admin 25 Jan 2016 at 1:51 p.m. CST

Copy
Michael Schwartz gravatar
Are you using a custom authentication script? If so which one? Also, what client are you using?

By Filip Van Tittelboom user 26 Jan 2016 at 9:37 a.m. CST

Copy
Filip Van Tittelboom gravatar
Found out that the ubuntu package upgrade is faulty. Not all components were upgraded to 2.4.1-1 with an apt-get upgrade. Anyway, this issue is absent in a 2.4.1-1 I booted from scratch

Post an answer