saml exception

[Former Member]

Hi all,

I'm tring to execute the saml demo application for sso. When I launch the application I have the following exceptions (in logviewer):

An exception occurred. Further details should be available in the audit trace for location "com.sap.security.core.server.saml.jaas.SAMLLoginModule". The exception text is: "Failed to connect to destination "saml_sso_demo_responder" with URL "https://milds2004.dir.svc.accenture.com:50101/samlssodemo_source/responder".: iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier".


--------------
Stack trace of log message with ID "0014C260CBB500620001A85E000015E000041083EB4A0B9D" written to trace 
[EXCEPTION]
 com.sap.security.core.server.saml.jaas.exception.SAMLLoginModuleException: [tc/sec/saml/service_0026] Failed to connect to destination "saml_sso_demo_responder" with URL "https://milds2004.dir.svc.accenture.com:50101/samlssodemo_source/responder".

	at com.sap.security.core.server.saml.jaas.SAMLLoginModule.login(SAMLLoginModule.java:724)

	at com.sap.engine.services.security.login.ModulesProcessAction.run(ModulesProcessAction.java:69)

	at java.security.AccessController.doPrivileged(Native Method)

	at com.sap.engine.services.security.login.FastLoginContext.login(FastLoginContext.java:152)

	at com.sap.engine.services.servlets_jsp.server.runtime.context.SessionServletContext.doLogin(SessionServletContext.java:624)

	at com.sap.engine.services.servlets_jsp.server.runtime.context.SessionServletContext.checkUser(SessionServletContext.java:294)

	at com.sap.engine.services.servlets_jsp.server.runtime.context.ApplicationContext.checkMap(ApplicationContext.java:414)

	at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.checkRequest(HttpHandlerImpl.java:68)

	at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:826)

	at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)

	at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)

	at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)

	at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

	at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

	at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

	at java.security.AccessController.doPrivileged(Native Method)

	at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:95)

	at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:159)

<b>Caused by: com.sap.security.api.saml.service.exception.SAMLServiceException: [tc/sec/saml/service_0026] Failed to connect to destination "saml_sso_demo_responder" with URL "https://milds2004.dir.svc.accenture.com:50101/samlssodemo_source/responder".</b>

	at com.sap.security.core.server.saml.service.SAMLServiceImpl.soapCall(SAMLServiceImpl.java:1397)

	at com.sap.security.core.server.saml.service.SAMLServiceImpl.resolveArtifacts(SAMLServiceImpl.java:900)

	at sun.reflect.GeneratedMethodAccessor4112.invoke(Unknown Source)

	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

	at java.lang.reflect.Method.invoke(Method.java:324)

	at com.sap.security.core.server.saml.jaas.SAMLLoginModule.login(SAMLLoginModule.java:427)

	... 17 more

Caused by: org.w3c.www.protocol.http.HttpException: iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier

	at org.w3c.www.protocol.http.HttpBasicServer.runRequest(Unknown Source)

	at org.w3c.www.protocol.http.HttpManager.runRequest(Unknown Source)

	at org.w3c.www.protocol.http.HttpURLConnection.connect(Unknown Source)

	at com.sap.security.core.server.saml.service.SAMLServiceImpl.soapCall(SAMLServiceImpl.java:1393)

	... 22 more
--------------------
User J2EE_GUEST, IP address 

Error processing an HTTP request. Http error [401] will be returned. The error is [Access Denied.No details available].

Could someone help me on this serious problem??

Thanks,

Vito

[Former Member]

Hi,

I am getting similar error. Did you got chance to fix this? Can you please let me know the fix of it.

Thanks in advance.

Sanny

[Former Member]

Hi,

I think this is Authentication issues. While configure SSO you have to give permission to this client.

Kind Regards,

S.Saravanan.