It's all about the answers!

Ask a question

Jazz Authorization Server Error while logging in.


Nikhil Khaladkar (1127) | asked Apr 06 '18, 11:15 a.m.

I have a test setup where we have a topology of 3 application servers in a distributed environment (JTS, RQM and CCM)  and a Jazz Authorization server. 

The issue that faced is that while trying to login into the application servers, on redirecting to the JAS login page and logging in, we get the following error message on the browser screen:

<o:p> </o:p>

error_code: _invalid_client_credentials
error_message: CRJSA0009E The single sign-on authentication did not succeed because of an application error.
error_message_explanation: The authentication process could not be completed because of a problem with the application. The application might be violating a protocol or using an underlying single sign-on library incorrectly. 
error_message_useraction: For details about the cause of the error, check the log files for the application and the authorization server.
<o:p> </o:p>

So as a workaround re-installed and restored the Jazz authorization server by referring the following link:

https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.repository.web.admin.doc/topics/c_jsasso_jas_backup_restore.html <o:p> </o:p>

https://jazz.net/wiki/bin/view/Deployment/ServerRenameAddendum <o:p> </o:p>

Is there any workaround that we can try to resolve the issue? 

One answer



permanent link
Ulf Arne Bister (1.3k413) | answered Apr 07 '18, 6:15 a.m.

 Hi,
normally you would get this error when choosing "Enable SSO" during installation of any of the apps but without properly setting up the Jazz Authorization server.

You can check this according to this technote: http://www-01.ibm.com/support/docview.wss?uid=swg22001999

To properly set up Jazz Authorization Server for an already established JTS environment:
set up JAS according to https://jazz.net/wiki/bin/view/Deployment/JASUserRegistryConfig
then follow instructions in https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.install.doc/topics/t_JsaSso_CLM_apps_enable.html

In case you are using RTC 6.0.4 or smaller, have your servers behind a reverse proxy hiding the port and use RTC Eclipse Client to login you might also get this error. In that case you stumbled into http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1PI85864

If this helps to resolve the problem please mark the answer as accepted.

- Arne

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.