Unable to log in with SAML SSO when user has special character in name

XMLWordPrintable

    • 15
    • Severity 2 - Major
    • 2

      When trying to authenticate a user who has a special character in their first name (é specifically) via SAML SSO, we see the following screen

      The error in the logs is: 

      com.atlassian.plugins.authentication.impl.web.saml.provider.InvalidSamlResponse: Received invalid SAML response: Signature validation failed. SAML Response rejected
	at com.atlassian.plugins.authentication.impl.web.saml.provider.impl.OneloginJavaSamlProvider.lambda$extractSamlResponse$1(OneloginJavaSamlProvider.java:89)
	at com.atlassian.plugin.util.ContextClassLoaderSwitchingUtil.runInContext(ContextClassLoaderSwitchingUtil.java:48)
	at com.atlassian.plugins.authentication.impl.web.saml.provider.impl.OneloginJavaSamlProvider.extractSamlResponse(OneloginJavaSamlProvider.java:80)
	at com.atlassian.plugins.authentication.impl.web.saml.SamlConsumerServlet.doPost(SamlConsumerServlet.java:87)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:648)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
	at com.atlassian.plugin.servlet.DelegatingPluginServlet.service(DelegatingPluginServlet.java:37)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
	at com.atlassian.plugin.servlet.ServletModuleContainerServlet.service(ServletModuleContainerServlet.java:45)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
        ...

      Workaround:

      • Make sure file encoding/Locale of the OS is set as UTF-8
      • Pass following parameters to JVM 
        CATALINA_OPTS="-Dfile.encoding=UTF-8 -Djavax.servlet.request.encoding=UTF8 ${CATALINA_OPTS}"

        1. Screen Shot 2018-01-08 at 4.33.38 PM.png
          Screen Shot 2018-01-08 at 4.33.38 PM.png
          147 kB

            Assignee:
            ajoshi7 (Inactive)
            Reporter:
            Vivian Hu (Inactive)
            Votes:
            14 Vote for this issue
            Watchers:
            23 Start watching this issue

              Created:
              Updated:
              Resolved: