pk0ys (pk0ys) asked a question.
Getting Internal server error when I tried to access my wazuh application via OKTA SSO
I keep getting internal server error when i tried to access my application via sso . See logs below
[ERROR][o.o.s.m.r.i.AbstractReloadingMetadataResolver] [node-1] Metadata Resolver SamlHTTPMetadataResolver com.amazon.dlic.auth.http.saml.HTTPSamlAuthenticator_1: Error occurred while attempting to refresh metadata from 'https://trial-6389524-admin.okta.com/api/v1/apps/0oa2s8653dpDuwTM1697/sso/saml/metadata?kid=3ckgwbldYnFd1d9ovxczIo_urB59RANnVqyUb78Yx18'
Are you sure the metadata URL you have is correct? I cannot navigate to the URL path you provided and I think it should be something that is publicly accessible. I compared your path with ones to my SAML apps and the format is different. Mine look like: https://***custom domain***/app/***app guid***/sso/saml/metadata I tried to reformat your URL to match mine but got a 404 error. Take a look at the "SAML Signing Certificates" for your app in Okta and under the "Actions" dropdown click "View IdP Metadata" and it will open a new tab and you can grab the URL from there.
If you have concerns about the metadata being public here is a post that talks about why it is OK.
https://stackoverflow.com/questions/38962290/security-concerns-with-providing-saml-metadata-on-public-url
Thank you. I was using an inactive metadata URL but I have modified my config to reflect the active one. but I still get the same error.
[ERROR][o.o.s.m.r.i.HTTPMetadataResolver] [node-1] Metadata Resolver SamlHTTPMetadataResolver com.amazon.dlic.auth.http.saml.HTTPSamlAuthenticator_1: Non-ok status code 403 returned from remote metadata source https://trial-6389524-admin.okta.com/api/v1/apps/0oa2s8653dpDuwTM1697/sso/saml/metadata?kid=3ckgwbldYnFd1d9ovxczIo_urB59RANnVqyUb78Yx18
[2022-10-28T11:50:08,717][ERROR][o.o.s.m.r.i.AbstractReloadingMetadataResolver] [node-1] Metadata Resolver SamlHTTPMetadataResolver com.amazon.dlic.auth.http.saml.HTTPSamlAuthenticator_1: Error occurred while attempting to refresh metadata from 'https://trial-6389524-admin.okta.com/api/v1/apps/0oa2s8653dpDuwTM1697/sso/saml/metadata?kid=3ckgwbldYnFd1d9ovxczIo_urB59RANnVqyUb78Yx18'
[2022-10-28T11:50:08,718][INFO ][o.o.s.m.r.i.AbstractReloadingMetadataResolver] [node-1] Metadata Resolver SamlHTTPMetadataResolver com.amazon.dlic.auth.http.saml.HTTPSamlAuthenticator_1: Next refresh cycle for metadata provider 'https://trial-6389524-admin.okta.com/api/v1/apps/0oa2s8653dpDuwTM1697/sso/saml/metadata?kid=3ckgwbldYnFd1d9ovxczIo_urB59RANnVqyUb78Yx18' will occur on '2022-10-28T10:51:08.717Z' ('2022-10-28T11:51:08.717+01:00' local time)
See my metadat below:
https://trial-6389524.okta.com/app/exk2s8653cbjJbHcb697/sso/saml/metadata
Thank you