Troubleshooting SAML authentication failures with additional debug logging

Still need help?

The Atlassian Community is here for you.

Ask the community


Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Summary

When working with Atlassian Authentication App the administrator may encounter SAML authentication failures on which the information on the UI or the default entries in the application log may not indicate the cause.

This document describes the steps to log additional entries in the log that may help with the investigation. Atlassian Support may also ask for this additional data.

Solution

You can follow the steps below to log additional debugging data.

The screen record below is an example of following these steps and collecting the suggested data.


  1. Temporarily enable DEBUG for the following packages.

    com.onelogin.saml2
    com.atlassian.plugins.authentication 
  2. Recreate the issue on the browser while collecting a HAR file.
  3. Disable the additional logging.
    1. The additional entries go to the application log (i.e. on Jira they are added to atlassian-jira.log).
  4. If working with Atlassian Support, share the following details in your ticket.
    1. The HAR file generated while recreating the problem.
    2. The output of the SQL queries from Providing Atlassian Authentication App data to Support (Jira, Bamboo, Bitbucket, Confluence Server and Data Center).
    3. The Support Zip file from all nodes of your Data Center cluster.




Last modified on Sep 30, 2022

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.