Certificate issues
In an exception report, the following message displays:
The server encountered an internal error () that prevented it from fulfilling this request.
This problem is usually caused by the HTTPS certificate or the root CA-signed certificate from the IdP or SP server. The certificate might not be stored in the BMC Atrium Single Sign-On server's truststore.
To resolve certificate issues
- Import the appropriate certificate into the truststore:
<installationDirectory>/tomcat/conf/cacerts.p12 - Restart the BMC Atrium Single Sign-On server.
The following message indicates the exception:
javax.servlet.ServletException: AMSetupFilter.doFilter
com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:118)
The following message indicates the root cause:
com.sun.identity.saml2.common.SAML2Exception: java.security.PrivilegedActionException: com.sun.xml.messaging.saaj.SOAPExceptionImpl: Message send failed
com.sun.identity.saml2.profile.SPACSUtils.getResponseFromArtifact(SPACSUtils.java:382)
com.sun.identity.saml2.profile.SPACSUtils.getResponseFromGet(SPACSUtils.java:247)
com.sun.identity.saml2.profile.SPACSUtils.getResponse(SPACSUtils.java:161)
org.apache.jsp.saml2.jsp.spAssertionConsumer_jsp._jspService(spAssertionConsumer_jsp.java:180)
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:374)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267)
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:91)
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*