Could not parse tenant request java.lang.IllegalStateException: Issuer not recognized
Arun Nukula
1 min read
After External vRealize Orchestrator 8.x upgrade to 8.4.2 , Users were unable to launch vRO UI , it fails with HTTP 400 response
*** vco-server-app.log ***
2021-08-04T08:06:34.280Z WARN vco [host='vco-app-6df77fc467-tfzvt' thread='http-nio-8280-exec-2' user='-' org='-' trace='-'] {} com.vmware.identity.websso.client.SiteAffinity - Failed to init CdcSession. likely due to missing vmafd jar. Message: com/vmware/identity/cdc/CdcFactory
2021-08-04T08:06:34.280Z INFO vco [host='vco-app-6df77fc467-tfzvt' thread='http-nio-8280-exec-2' user='-' org='-' trace='-'] {} com.vmware.identity.websso.client.endpoint.SsoRequestSender - Added Renewable condition
2021-08-04T08:06:34.280Z INFO vco [host='vco-app-6df77fc467-tfzvt' thread='http-nio-8280-exec-2' user='-' org='-' trace='-'] {} com.vmware.identity.websso.client.endpoint.SsoRequestSender - Added Delegable condition
2021-08-04T08:06:34.280Z INFO vco [host='vco-app-6df77fc467-tfzvt' thread='http-nio-8280-exec-2' user='-' org='-' trace='-'] {} com.vmware.identity.websso.client.endpoint.SsoRequestSender - Destination URL: https://<<vrofqdn>>/websso/SAML2/SSO/vsphere.local
*** vCenter Logs ***
[2021-08-04T08:01:54.451Z tomcat-http--4 vsphere.local 7c66102f-55ad-44c6-b46f-235b056d20d0 ERROR com.vmware.identity.BaseSsoController] Could not parse tenant request java.lang.IllegalStateException: Issuer not recognized
[2021-08-04T08:01:54.451Z tomcat-http--4 vsphere.local 7c66102f-55ad-44c6-b46f-235b056d20d0 INFO com.vmware.identity.samlservice.impl.SAMLAuthnResponseSender] Responded with ERROR 400 message Issuer not recognized
[2021-08-04T08:01:54.451Z tomcat-http--4 vsphere.local 7c66102f-55ad-44c6-b46f-235b056d20d0 INFO com.vmware.identity.BaseSsoController] End processing SP-Initiated SSO response. Session was created.
[2021-08-04T08:06:34.335Z tomcat-http--5 vsphere.local e1c95121-03fc-4d95-afc8-2a82e4e46499 INFO com.vmware.identity.SsoController] Welcome to SP-initiated AuthnRequest handler! The client locale is en_US, tenant is vshere.local
[2021-08-04T08:06:34.335Z tomcat-http--5 vsphere.local e1c95121-03fc-4d95-afc8-2a82e4e46499 INFO com.vmware.identity.
For remediation , go ahead and perform re-authentication. Post that it would restart the services of vco-server.
Wait till its complete and then check the URL, it should be opening now and working
Never miss a post
New guides on VMware Cloud Foundation, Aria Suite, and infrastructure automation. Follow the blog in your feed reader and new posts show up as soon as they are published.
Using a different reader? Copy the feed URL and add it there.