Ask Questions and Find Answers

Hi everybody,

I am new to this platform. I got the Liferay DFX 7.3.10 set up for my local machine. I have set up liferay as SAML identity provider. And using my project running on rails as service provider. All the setup went well as I am able to set up IDP and get the meta data and use it in rails project. Both IDP and SP initiated SSO are working fine. When i perform SP initiated sign out, all the steps are moving along well with all proper request and response. But when i try to initiate SSO again regardless of it being SP or IDP initiated; rather the redirecting to the login page in liferay and another redirect takes place which takes the page to 'http://localhost:8080/c/portal/saml/sso?continue=true' with 'Unable to process SAML request.' error. After this if try again, things looks normal and I get the login page again. 

Is this related to 'JSESSIONID' cookie? As i was looking deeper, when i delete this cookie and try to initiate SSO, same redirect happens every time.

Looking at logs, 

For IDP initiated 

• [http-nio-8080-exec-8][HTTPPostDecoder:116] Request did not contain either a SAMLRequest or SAMLResponse paramter.  Invalid request for SAML 2 HTTP POST binding.'

For SP initited

• ERROR [http-nio-8080-exec-8][BasicParserPool:50] XML Parsing Error org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
• ERROR [http-nio-8080-exec-8][BaseSamlStrutsAction:59] org.opensaml.messaging.decoder.MessageDecodingException: Error unmarshalling message from input stream

Any help would be highly appreciated.