Maximo

Maximo

Come for answers, stay for best practices. All we're missing is you.

 View Only
  • 1.  SSO Configuration in MAS 9

    Posted Wed September 17, 2025 08:46 AM

    Hi Everyone,

    We have configured SSO in our MAS 9 environment, but while login to MAS, getting below error message:

    You cannot log in at this time

    AIUOM0100E: You cannot log in because of a SAML authentication error. Before logging in to the Maximo Application Suite, log out of your SAML account. If the error persists, contact your administrator.

    Wanted to check if anybody have any suggestions or ideas to check. Also any input on which pods logs needs to be checked would be helpful.



    ------------------------------
    Poonam Aswani
    ------------------------------


  • 2.  RE: SSO Configuration in MAS 9

    Posted Thu September 18, 2025 02:18 AM

    Hi Poonam,

    the pods You want to check are coreidp and coreapi (which by default has 3 replicas).
    One more thing: remember to set SAML ID for users after configuring SSO. This doest not happen auto-magically, unless You have SCIM sync (or LDAP sync) in place.



    ------------------------------
    Witold Wierzchowski
    Solution Architect
    Cohesive Poland
    ------------------------------



  • 3.  RE: SSO Configuration in MAS 9
    Best Answer

    Posted Thu September 18, 2025 05:14 PM

    Hi Poonam,

    SAML protocol requires precise configuration on both identity provider and service provider (MAS) sides. You need to find the specific error to identify the root cause. One way is diving into logs as suggested by Witold but logs might be missing crucial details. What always worked for me is to use a SAML tracer tool that will capture and decode all SAML requests going between IdP and SP. When you capture SAML communication, you can easily find where the error is coming from by checking SAML XML payloads. I used a SAML-tracer extension for Firefox although similar extensions should be available for other browsers as well.



    ------------------------------
    Ivan Lagunov
    Manager Technology
    ZNAPZ B.V.
    ------------------------------



  • 4.  RE: SSO Configuration in MAS 9

    Posted Fri September 26, 2025 03:18 AM

    Thanks Ivan and Witold, we were able to resolve the issue using SAML tracer.



    ------------------------------
    Poonam Aswani
    ------------------------------