Troubleshooting

This topic describes how to resolve common errors that arise when configuring a single sign-on partnership between PingOne Cloud and Pivotal Single Sign-On (SSO).

CA Single Sign-On Partnership is Inactive

Symptom:

Explanations:

• The CA Single Sign-On is inactive in CA Single Sign-On.

Service Provider Entity ID Misconfigured

Symptom:

Explanation:

• The service provider Entity ID is misconfigured in CA Single Sign-On.

Incoming SAML message is invalid

Symptom:

Explanation:

• The identity provider Entity ID is misconfigured in CA Single Sign-On or in PCF Single Sign-On.

• The Name ID Format was misconfigured in CA Single Sign-On

Assertion Consumer Service URL Misconfigured

Symptom:

Explanation:

• The service provider Assertion Consumer Service (ACS) is misconfigured in CA Single Sign-On.

Audience Field Misconfigured

Symptom:

Explanation:

• The service provider Audience Field is misconfigured in CA Single Sign-On.

Expired Certificate

Symptom:

Explanation:

• The certificate has expired in CA Single Sign-On.

Identity Provider SSO URL Misconfigured

Symptom:

Explanation:

• The identity provider SSO URL is misconfigured in PCF Single Sign-On.