Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Tamas Zakar (TamasZ28) NN Biztosító Zrt
NN Biztosító Zrt
HU
TamasZ28 Member since 2015 2 posts
NN Biztosító Zrt
Posted: Sep 11, 2017
Last activity: Oct 16, 2018
Posted: 11 Sep 2017 10:28 EDT
Last activity: 16 Oct 2018 12:03 EDT
Closed
Solved

problem with ADFS SSO after upgrading from 7.1.7 to 7.2.2

Hi,

We had configured SSO on our Pega 7.1.7 using ADFS and SAML2. (It had worked with two hotfixes.)

Recently we upgraded our PRPC from 7.1.7 to 7.2.2 and since then I see "Unable to process the SAML WebSSO request : The Response did not contain any Authentication Statement that matched the Subject Confirmation criteria" message on Pega page after trying to log in. The SAML request/response seems normal but those are encrypted.
These are the relevant rows from the Pega log:

Show More

Hi,

We had configured SSO on our Pega 7.1.7 using ADFS and SAML2. (It had worked with two hotfixes.)

Recently we upgraded our PRPC from 7.1.7 to 7.2.2 and since then I see "Unable to process the SAML WebSSO request : The Response did not contain any Authentication Statement that matched the Subject Confirmation criteria" message on Pega page after trying to log in. The SAML request/response seems normal but those are encrypted.
These are the relevant rows from the Pega log:

2017-09-11 16:22:04,543 [ http- Proprietary information hidden:8543-3] [          ] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden  - Requestor A89A1FEB10AA1950BFC2585C9F5956394 is reserved by current thread 
2017-09-11 16:22:04,552 [ http- Proprietary information hidden:8543-3] [          ] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden  - A89A1FEB10AA1950BFC2585C9F5956394 is added to memory map 
2017-09-11 16:22:04,557 [ http- Proprietary information hidden:8543-3] [  STANDARD] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden  - doWithRequestorLocked(); Requestor: A89A1FEB10AA1950BFC2585C9F5956394; Lock released 
2017-09-11 16:22:04,563 [ http- Proprietary information hidden:8543-3] [  STANDARD] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden  - doWithRequestorLocked(); Requestor: A89A1FEB10AA1950BFC2585C9F5956394; Lock released 
2017-09-11 16:22:04,591 [ http- Proprietary information hidden:8543-3] [  STANDARD] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden|Rest|WebSSO|SAML|AssertionConsumerService  - doWithRequestorLocked(); Requestor: A89A1FEB10AA1950BFC2585C9F5956394; Lock released 
2017-09-11 16:22:04,596 [ http- Proprietary information hidden:8543-3] [  STANDARD] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden|Rest|WebSSO|SAML|AssertionConsumerService  - doWithRequestorLocked(); Requestor: A89A1FEB10AA1950BFC2585C9F5956394; Lock released 
2017-09-11 16:22:04,621 [ http- Proprietary information hidden:8543-3] [  STANDARD] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden|Rest|WebSSO|SAML|AssertionConsumerService  - doWithRequestorLocked(); Requestor: A89A1FEB10AA1950BFC2585C9F5956394; Lock released 
2017-09-11 16:22:04,627 [ http- Proprietary information hidden:8543-3] [  STANDARD] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden|Rest|WebSSO|SAML|AssertionConsumerService  - doWithRequestorLocked(); Requestor: A89A1FEB10AA1950BFC2585C9F5956394; Lock released 
2017-09-11 16:22:04,633 [ http- Proprietary information hidden:8543-3] [  STANDARD] [                    ] (pega.TRACE.requestor_lifecycle) DEBUG pppegadev.hu.cre.insim.biz| Proprietary information hidden|Rest|WebSSO|SAML|AssertionConsumerService  - New Requestor A89A1FEB10AA1950BFC2585C9F5956394 is created 
2017-09-11 16:22:04,658 [ http- Proprietary information hidden:8543-3] [  STANDARD] [     PegaRULES:07.10] (Admin_Security_SSO_SAML.Action) ERROR pppegadev.hu.cre.insim.biz| Proprietary information hidden|Rest|WebSSO|SAML|AssertionConsumerService|A89A1FEB10AA1950BFC2585C9F5956394  - Error while executing the Assertion Consumer Service activity : The Response did not contain any Authentication Statement that matched the Subject Confirmation criteria

Any suggestions, please?

Regards,
Tamas

***Updated by moderator: Lochan to add SR details***


**Moderation Team has archived post**


This post has been archived for educational purposes. Contents and links will no longer be updated. If you have the same/similar question, please write a new post.


Show Less
To see attachments, please log in.
Security System Administration Support Case Created

Accepted Solution

Posted: 7 years ago
Posted: 11 Sep 2017 10:35 EDT
Arun Kumar Mahanty (Arun_Mahanty) Pegasystems Inc. Principal Technical Solutions Engineer
Pegasystems Inc.
IN

Hello Tamas,

Looks like there's a HFix-34802 available for this issue .

Create a SR with GCS and the hotfix will be supplied to you .

Thanks,

Arun

To see attachments, please log in.
Posted: 7 years ago
Posted: 12 Sep 2017 5:49 EDT
Lochana Durgada Vijayakumar (Lochan_DV) PEGA Senior Manager, Knowledge Management
Pegasystems Inc.
IN

Thanks Tamas!

We've updated the SR details in the original post above. Do let us know the outcome of your test!

Regards,

To see attachments, please log in.
Posted: 7 years ago
Posted: 13 Sep 2017 6:10 EDT
Tamas Zakar (TamasZ28) NN Biztosító Zrt
NN Biztosító Zrt
HU

Hi, after installing the hotfix and restart the server I get similar error message (a bit different because the space is missing between after the "matched" word):

2017-09-13 11:57:13,856 [ http- Proprietary information hidden:8543-5] [  STANDARD] [     PegaRULES:07.10] (Admin_Security_SSO_SAML.Action) ERROR pppegadev.hu.cre.insim.biz| Proprietary information hidden|Rest|WebSSO|SAML|AssertionConsumerService|A4BB15F2B1FA69005F029876FD96B381F  - Error while executing the Assertion Consumer Service activity : The Response did not contain any Authentication Statement that matchedthe Subject Confirmation criteria

I remote traced the pySAMLWebSSOAuthenticationActivity, it quits in step 17, but I did not see any error message in tracer.

Regards,
Tamas

To see attachments, please log in.
Posted: 7 years ago
Posted: 13 Sep 2017 7:21 EDT
Lochana Durgada Vijayakumar (Lochan_DV) PEGA Senior Manager, Knowledge Management
Pegasystems Inc.
IN

Hi Tamas!

Thanks for the update! 

Other community members - Please create an SR to obtain HFix-34802 in case you face the same issue.

Regards,

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice