SAML SSO fails with "We couldn't log you in. This may be for a variety of reason. We suggest trying again."
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
要約
SSO login fails with "We couldn't log you in. This may be for a variety of reason. We suggest trying again."
環境
Single or multi node Jira DC behind a reverse proxy or load balancer.
診断
次のエラーがログに記録されます。
Received invalid SAML response: The response was received at <ANOTHER_URL>/plugins/servlet/samlconsumer instead of <BASE_URL>/plugins/servlet/samlconsumer
原因
This error occurs after a change to the Jira base URL, if the same change isn't applied to the proxyName
parameter in server.xml.
ソリューション
- Apply the change to server.xml and restart Jira.
- When retesting immediately after the change, make sure to be on incognito mode.