SAML IDP POST to /saml_login URL returns 403 response

Description

Environment

  • Experience Manager

Issue/Symptoms
You have configured SAML Authentication in AEMand after logging in IDP, you get a 403 response from AEMduring the SAML POSTto /saml_login or /content/saml_login ;(or other URL configured for the IDP to post back to).

The problem only happens when authenticating via the dispatcher enabled URL.

In the dispatcher.log, you find this text:

Filter rejects: POST


Resolution

Add the following rule to the dispatcher farm configuration (.any files) /filter section:

/0100 {  /method "POST" /url "*/saml_login" }

Cause

The dispatcher /filter ;section allows POST requests to <b>/saml_login.*

On this page