Uploaded image for project: 'Confluence Server and Data Center'
  1. Confluence Server and Data Center
  2. CONFSERVER-43712

Crowd SSO users cannot login to Confluence server after upgrading to 5.10.5

    XMLWordPrintable

    Details

      Description

      Summary

      Crowd SSO users cannot login to Confluence server after upgrading to 5.10.5

      after upgrading to 5.10.5, all Crowd using SSO user cannot login to Confluence.

      Error message in atlassian-confluence.log:

      login login : '<username>' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie. 
      
      
      

      Environment

      • Confluence 5.10.5 + Crowd and SSO enabled

      Steps to Reproduce

      1. Install Confluence 5.10.5
      2. Enable SSO settings in Confluence and Crowd
        edit seraph-config.xml
        refer https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-confluence-198573.html
      3. restart Confluence

      Expected Results

      Crowd users can log in.

      Actual Results

      Crowd users cannot log in.

      Notes

      Workaround

      1) Login Crowd once, before logging in Confluence.
      2) Disabling SSO allows the login by disabling the Confluence "Crowd SSO Authenticator" and re-enabling the default Confluence authenticator:

      1. Shut down Confluence if it is currently running
      2. Edit the file CONFLUENCE/confluence/WEB-INF/classes/seraph-config.xml
      3. Uncomment the default Confluence authenticator:
        <authenticator class="com.atlassian.confluence.user.ConfluenceAuthenticator"/>
        
      1. Comment out the Crowd SSO Authenticator:
        <!-- <authenticator class="com.atlassian.confluence.user.ConfluenceCrowdSSOAuthenticator"/> -->
        
      1. Restart Confluence

      Note that this workaround is to allow users to log in to Confluence, however, SSO will not work with Confluence

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              qpham@atlassian.com Quan Pham
              Reporter:
              tnagasaka takuya
              Votes:
              11 Vote for this issue
              Watchers:
              40 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: