Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Jazz Authorization Server Error while logging in.

I have a test setup where we have a topology of 3 application servers in a distributed environment (JTS, RQM and CCM)  and a Jazz Authorization server. 

The issue that faced is that while trying to login into the application servers, on redirecting to the JAS login page and logging in, we get the following error message on the browser screen:

<o:p> </o:p>

error_code: _invalid_client_credentials
error_message: CRJSA0009E The single sign-on authentication did not succeed because of an application error.
error_message_explanation: The authentication process could not be completed because of a problem with the application. The application might be violating a protocol or using an underlying single sign-on library incorrectly. 
error_message_useraction: For details about the cause of the error, check the log files for the application and the authorization server.
<o:p> </o:p>

So as a workaround re-installed and restored the Jazz authorization server by referring the following link:

https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.repository.web.admin.doc/topics/c_jsasso_jas_backup_restore.html <o:p> </o:p>

https://jazz.net/wiki/bin/view/Deployment/ServerRenameAddendum <o:p> </o:p>

Is there any workaround that we can try to resolve the issue? 

0 votes



One answer

Permanent link

 Hi,
normally you would get this error when choosing "Enable SSO" during installation of any of the apps but without properly setting up the Jazz Authorization server.

You can check this according to this technote: http://www-01.ibm.com/support/docview.wss?uid=swg22001999

To properly set up Jazz Authorization Server for an already established JTS environment:
set up JAS according to https://jazz.net/wiki/bin/view/Deployment/JASUserRegistryConfig
then follow instructions in https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.install.doc/topics/t_JsaSso_CLM_apps_enable.html

In case you are using RTC 6.0.4 or smaller, have your servers behind a reverse proxy hiding the port and use RTC Eclipse Client to login you might also get this error. In that case you stumbled into http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1PI85864

If this helps to resolve the problem please mark the answer as accepted.

- Arne

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 7,498
× 2,357
× 85

Question asked: Apr 06 '18, 11:15 a.m.

Question was seen: 4,609 times

Last updated: Apr 07 '18, 6:15 a.m.

Confirmation Cancel Confirm