IDP启动SSO时出现WSO2 APIM 1.10.0错误:“参数无效。缺少中继状态值。”

时间:2017-06-12 22:20:29

标签: wso2 single-sign-on wso2-am

我已为使用PingFederate的IdP启动的SSO配置了WSO2 API Manager 1.10.0。当我尝试访问发布者URL时,它会正常登录,我收到了正确的SAML响应。

但是UI抛出了错误:

Error 500 : The page cannot be displayed.

The server encountered an internal error or misconfiguration and was unable to complete your request. 

服务器端有:

Caused by: javax.script.ScriptException: **Invalid argument. Relay state value is missing.**
    at org.wso2.carbon.hostobjects.sso.SAMLSSORelyingPartyObject.jsFunction_getRelayStateProperty(SAMLSSORelyingPartyObject.java:868)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:606)
    at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:126)
    ... 50 more

WSO2 API Manager 1.10.0是否支持 IdP仅启动SSO

***更新:根据以下回复,最佳选择是升级到> 2.1.0。

1 个答案:

答案 0 :(得分:1)

APIM 1.10.0不支持IDP初始化SSO。但是,APIM 2.1.0支持它。请参阅this