Article - CS375371

Some users can't authenticate with SSO

Modified: 25-Aug-2022   


Applies To

  • ThingWorx Platform 9.3

Description

Some users can't authenticate with SSO with error on web page : 
The system is currently encountering an authentication configuration error.
Close the browser and try to login again. If the problem persists, contact your administrator.
Thingworx Security.log is reporting error : 
[L: DEBUG] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: SuperUser] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] IdP Credential Attributes: [uid, group]
[L: ERROR] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] [ Failed to utilize the SSO component for authentication ][ com.thingworx.security.authentication.AuthenticatorException: com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ Group [<TWX_GROUP_NAME>] does not exist ]
[L: DEBUG] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] authentication status: [false]
[L: ERROR] [O: S.c.t.s.a.AuthenticationFilter] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] Could not handle request
[L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] errorMessage: [Unauthorized], statusCode: [401]
[L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] [ com.thingworx.security.authentication.AuthenticatorException: com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ Group [<TWX_GROUP_NAME>] does not exist ]
[L: WARN] [O: S.c.t.s.m.ApplicationKeyManager] [I: ] [U: ???] [S: ] [P: ] [T: WSExecutionProcessor-42] *** ApplicationKey not found ***



 
This is a printer-friendly version of Article 375371 and may be out of date. For the latest version click CS375371