Hello, I am on PF 14.1
I am trying to implement SAML for the Admin SSO – All information from what I can see is correct. I followed the install guide. I have used AI to also troubleshoot and everything comes back as all is good. I don’t trust AI though. I can say that it walked me through manually adding a provider using perl, my variables, and also using the PF variables. my $s=Lasso::Server->new( "/usr/local/pf/conf/saml-sp-metadata.xml", "/usr/local/pf/conf/saml/saml.key", undef, "/usr/local/pf/conf/saml/saml.crt" ); $s->add_provider( $pf::constants::saml::PROVIDER_ROLE_IDP, "/usr/local/pf/conf/uploads/sources/Entra_SAML_idp_metadata_path_upload.xml", "/usr/local/pf/conf/uploads/sources/Entra_SAML_idp_cert_path_upload.crt", "/usr/local/pf/conf/uploads/sources/Entra_SAML_idp_ca_cert_path_upload.crt" ); Both successful. On the SSO Page: Caught exception in captiveportal::Controller::Root->dynamic_application "Can't create Single-Sign-On URL : Can't call method "add_provider" on an undefined value at /usr/local/pf/lib/pf/Authentication/Source/SAMLSource.pm line 108. " I get an error: Caught exception in captiveportal::Controller::Root->dynamic_application During troubleshooting we initially received errors indicating the SAML private key could not be loaded. We regenerated and validated the key/certificate pair and subsequently verified that Lasso can successfully initialize the SP and load the Entra ID provider using the active PacketFence configuration. Despite this, Admin SSO continues to fail with: "Can't create Single-Sign-On URL : Can't call method "add_provider" on an undefined value at /usr/local/pf/lib/pf/Authentication/Source/SAMLSource.pm line 108." No useful entries are produced in: /var/log/apache2/error.log Jeremy Yoke ________________________________ Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential or proprietary information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, immediately contact the sender by reply e-mail and destroy all copies of the original message.
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
