Troubleshooting Guide › Runtime Issues › Federation Single Sign-On Issues

Federation Single Sign-On Issues

To assist in troubleshooting, you should know how to activate trace, and the location of the configuration and logging files.

This section contains the following topics:

How to Use the Cloud Service Provider Administration Console to Troubleshoot

How to Enable Logging and Trace Tools for Federation Single-Sign-On

Locations for the Configuration, Log, and Trace Files for Federation Single-Sign-On Components

Common Federation Single-Sign-On Issues

How to Use the Cloud Service Provider Administration Console to Troubleshoot

The Cloud Service Provider team uses the CSP Console to configure authentication schemes, domain policies, federation entities and partnerships.

If an authentication issue is reported, log in to the Cloud Service Provider Administration Console, and then check that the following items are correctly configured:

• User directory
• Realms: agent, effective resource, authentication scheme, and authentication level
• Rules
• Policies
• Responses

If a federation single sign-on issue is reported, check the following:

• The SAML signing certificate
• The Identity Provider entity configuration
• The Service Provider entity configuration
• The partnership configuration