We have a 2 environment with same IdP (ADFS) our certificate was expiring hence a new PEM cert was loaded into Appian on TEST the SAML Authentication works but the same does not work on DEV. They both have identical configuration and metadata files from IdP. While looking at the tomcat logs on the environment that has issues i see following SAML errors in the logs.
2021-09-29 18:50:29,928 [ajp-nio-0.0.0.0-8009-exec-202] ERROR org.opensaml.xmlsec.encryption.support.Decrypter - Failed to decrypt EncryptedData using either EncryptedData KeyInfoCredentialResolver or EncryptedKeyResolver + EncryptedKey KeyInfoCredentialResolver
2021-09-29 18:50:29,929 [ajp-nio-0.0.0.0-8009-exec-202] ERROR org.opensaml.saml.saml2.encryption.Decrypter - SAML Decrypter encountered an error decrypting element contentorg.opensaml.xmlsec.encryption.support.DecryptionException: Failed to decrypt EncryptedData at org.opensaml.xmlsec.encryption.support.Decrypter.decryptDataToDOM(Decrypter.java:550) at org.opensaml.xmlsec.encryption.support.Decrypter.decryptDataToList(Decrypter.java:452) at org.opensaml.xmlsec.encryption.support.Decrypter.decryptData(Decrypter.java:412) at org.opensaml.saml.saml2.encryption.Decrypter.decryptData(Decrypter.java:176) at org.opensaml.saml.saml2.encryption.Decrypter.decrypt(Decrypter.java:104)
2021-09-29 19:10:07,593 [ajp-nio-0.0.0.0-8009-exec-304] INFO com.appiancorp.security.auth.saml.SamlFilter - Authentication Error: Error while trying to extract SAML Auth Tokenorg.springframework.security.authentication.InternalAuthenticationServiceException: Error while trying to extract SAML Auth Token at com.appiancorp.security.auth.saml.SamlFilter.getSamlAuthenticationToken(SamlFilter.java:193)
2021-09-29 19:10:07,597 [ajp-nio-0.0.0.0-8009-exec-304] ERROR com.appiancorp.security.auth.saml.SamlFilter - An internal error occurred while trying to authenticate the user.
org.springframework.security.authentication.InternalAuthenticationServiceException: Error while trying to extract SAML Auth Token
Discussion posts and replies are publicly visible