Deleteged Azure AD, duplicate pk in postgres_jpa_ticket_entity

[Pablo Vidaurri]

This is happening often, users login via Deleted Azure AD and get an "Unauthorized Access" exception with "Unable to locate or parse the idp config ...". 

Logs show: 

ERROR: duplicate key value violates unique constraint "postgres_jpa_ticket_entity_pkey"
  Detail: Key (id)=(TST-81a34fa7-a23d-4799-8167-1c86f7e79498) already exists.  Call getNextException to see other errors in the batch.

Any idea why this would be happening?

-psv

[Ray Bon]

Pablo,

Is that deleted or delegated?

Is it possible that azure ad metadata is missing or not in the location that cas thinks it is?

Ray

On Mon, 2024-02-26 at 13:44 -0800, Pablo Vidaurri wrote:

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

[Pablo Vidaurri]

Yep, it is  delegated  Azure Ad (not deleted).

The issue is not consistent. Sometimes it works others it does not. At the moment I am on a single node so it's not a difference in nodes.

I do not have metadata as this is oidc. Should oidc still have metedata for the ad? How about a service config? So far it is usually working without it.

I was assuming a false error message was displayed and actual error is due to sql error not missing idp config.

-psv