DSpace 9.1 SAML issue

[Cameron, Jake]

Hello Everyone,

 

DSpace 9, Tomcat 10.1, Apache with pm2 proxy for the front end.

 

I have SAML configured, when I sign in, it takes me back to the login page, but the sign in does not happen.

 

I have looked through the log files and it looks like things are happening correctly.

 

Not sure if this cookie is the issue or not.

 

28-Jul-2025 15:48:09.232 INFO [ajp-nio-127.0.0.1-8009-exec-1] org.apache.tomcat.util.http.parser.Cookie.logInvalidHeader A cookie header was received [orejime-anonymous={"authentication":true,"preferences":true,"acknowledgement":true,"correlation-id":true,"accessibility":true};] that contained an invalid cookie. That cookie will be ignored.

Note: further occurrences of this error will be logged at DEBUG level.

 

I have all the configs setup in the authentication.cfg, authentication-saml.cfg and saml-reying-party.cfg files.  Everything is speaking, just not sure why the login isn’t triggering.

 

Jake

--

Jake Cameron, BCS(UNB)

Systems Support Specialist III

Library Information Systems

University of Lethbridge Library

Phone:(403)329-2756

This e-mail, including any and all attachments, is only for the use of the intended recipient(s) and may contain information that is confidential or privileged. If you are not the intended recipient, you are advised that any dissemination, copying or other use of this e-mail is prohibited. Please notify the sender of the error in communication by return e-mail and destroy all copies of this e-mail. Thank you.

 

[Cameron, Jake]

Did a little tinkering and now it’s fixed.  I removed all of the configs other than what was needed in

 

saml-relying-party.auth0.asserting-party.metadata-uri =

 

from saml-relying-party.cfg.

 

Having the entity id, and the other optional things was causing it to error out.

 

Jake

 

--

Jake Cameron, BCS(UNB)

Systems Support Specialist III

Library Information Systems

University of Lethbridge Library

Phone:(403)329-2756

This e-mail, including any and all attachments, is only for the use of the intended recipient(s) and may contain information that is confidential or privileged. If you are not the intended recipient, you are advised that any dissemination, copying or other use of this e-mail is prohibited. Please notify the sender of the error in communication by return e-mail and destroy all copies of this e-mail. Thank you.

 

--
All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/dspace-tech/YT3PR01MB6472A950A66AF1DF6D1745EA845AA%40YT3PR01MB6472.CANPRD01.PROD.OUTLOOK.COM.