SAML authentication succeeds but the user is not logged in
- Product: Primo
- Product Version: August 2016 Release +
- Relevant for Installation Type: Multi-Tenant Direct, Dedicated-Direct, Local, TotalCare
Scenario
- Click Sign In
- The browser is redirected to the IDP login page
- Enter user credentials
- The browser is redirected to Primo but the user is not logged in
Resolution
Verify the following values are identical:
| Primo Authentication Manager | SAML Response returned to Primo | If Alma is used for user information retrieval |
|---|---|---|
| IDP_ISSUER | saml2:Issuer | |
| USER_ID_ATTR_NAME | saml2:Attribute Name= USER_ID_ATTR_NAME | USER_ID_ATTR_NAME (value)= Identifier (primary or additional) |
| AUTH_BASE_URL | RelayState - decoded base_url - for example https://<institution>-primo.hosted.exlibrisgroup.com | |
| Certificate File | X509Certificate |
- Article last edited: 27-Mar-2017