Return
-
Title
Federated Authentication fails with the error: The issuer of the security token was not recognized by the IssuerNameRegistry. -
Description
After successfully configuring Federated Authentication in the Active Roles Web Interface, after some time (with no changes being made in Active Roles) the following error is encountered when attempting to authenticate:
The issuer of the security token was not recognized by the IssuerNameRegistry. To accept security tokens from this issuer, configure the IssuerNameRegistry to return a valid name for this issuer. -
Cause
The certificate securing the Federated Authentication has changed.
Currently, Active Roles does not automatically refresh this certificate. -
Resolution
WORKAROUND
Re-configure the Federated Authentication in the Active Roles Configuration Center. This will fetch the new certificate.
STATUS
Enhancement ID 437706 has been created so that Active Roles will automatically refresh any new certificate for a configured Federated Authentication.
Product Management will evaluate the request and this feature may become available in a future release of the product.
There are no guarantees that this specific enhancement request will be implemented in a future release.
For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/ -
Change Request
437706