Cannot Log In, "The issuer is not set as a trusted source"
Problem
The user is unable to log in, even though they have provided the correct credentials. Examining the log file Catalina.out shows that the user was authenticated and issued a SAML token, however the following errors are in the log file:
Error
FATAL [com.loftware.security.service.thread.SecurityRequestThread4] d.a(?) | The assertion failed verification - The issuer is not set as a trusted source.
Explanation
This will happen if the key.private.xml, key.public.xml and serviceProviders.publickeys.xml do not contain the proper ID. This can occur if there is an issue with the Hostname resolution of the system after installation.
Solution
The solution is to either update the existing key files with the hostname of the system, or just recreate the keys using the CreateKeys.sh/bat file.
- Run createKeys.sh/bat
or
- Obtain the hostname of the system.
- Edit each of the key files (key.public.xml, key.private.xml, and serviceProviders.publickeys.xml) and update the ID to the hostname.
Article Number
18968
Versions
All supported LWA product versions.
Environment
All supported LWA Environments.