WSO2身份服务器：SAML SSO重定向URI被转换为主机名的IP地址

Question

I have configured the travelocity app to work running on a localhost with the Identity Server running on the local host. Works well

Then I rebuild the travelocity app to work with an external IS - changing the travelocity.properties SAML2.IdPURL OAuth2.TokenURL OpenId.ProviderURL to point to a public IS with valid SSL Certs

When I supplied https://www.mydomainname.com/commonauth in the Facebook "Valid OAuth redirect URIs" - the travelocity throws up an error "URL Blocked: This redirect failed because the redirect URI is not whitelisted in the app's Client OAuth Settings. Make sure Client and Web OAuth Login are on and add all your app domains as Valid OAuth Redirect URIs." with the redirect contain the IP Address of the server rather than the domain name of the server

When I supply the IP address for commonauth, it fails with "SAML2 Response Issuer verification failed " - I am assuming it is because the ssl certs doesn't match the ipaddress.

So why and where is the redirect-uri being converted to IP-Address? And mainly how can I resolve this?

Answer 1

您可以通过博客[ 1 ]中的步骤来验证所执行的步骤。

Answer 2

You need to change the SAML2.IdPEntityId property in the travelocity.properties to match the value of the

Residentity IDP --> Inbound Authentication Configs --> SAML --> SAML issuer value.

After you configure your IS with a hostname.