Article - CS375371
Some users can't authenticate with SSO
Modified: 25-Aug-2022
Applies To
- ThingWorx Platform 9.3
Description
Some users can't authenticate with SSO with error on web page :
The system is currently encountering an authentication configuration error. Close the browser and try to login again. If the problem persists, contact your administrator.Thingworx Security.log is reporting error :
[L: DEBUG] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: SuperUser] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] IdP Credential Attributes: [uid, group] [L: ERROR] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] [ Failed to utilize the SSO component for authentication ][ com.thingworx.security.authentication.AuthenticatorException: com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ Group [<TWX_GROUP_NAME>] does not exist ] [L: DEBUG] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] authentication status: [false] [L: ERROR] [O: S.c.t.s.a.AuthenticationFilter] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] Could not handle request [L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] errorMessage: [Unauthorized], statusCode: [401] [L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-51] [ com.thingworx.security.authentication.AuthenticatorException: com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ com.thingworx.common.exceptions.InvalidRequestException: Group [<TWX_GROUP_NAME>] does not exist ][ Group [<TWX_GROUP_NAME>] does not exist ] [L: WARN] [O: S.c.t.s.m.ApplicationKeyManager] [I: ] [U: ???] [S: ] [P: ] [T: WSExecutionProcessor-42] *** ApplicationKey not found ***
This is a printer-friendly version of Article 375371 and may be out of date. For the latest version click CS375371