|
|
|
## InvalidFederatedIdentityActionMessage
|
|
|
|
### Description:
|
|
|
|
When logging in via Keycloak / TU Wien Identity Provider we see `InvalidFederatedIdentityActionMessage`, and cannot proceed.
|
|
|
|
|
|
|
|
### Cause:
|
|
|
|
In our case, the identity providers' X509 certificate expired.
|
|
|
|
### Solution:
|
|
|
|
1. Download the current SAML entity from [https://idp.zid.tuwien.ac.at/saml2](https://idp.zid.tuwien.ac.at/saml2). For other identity providers see [https://eduid.at/entities/idp/](https://eduid.at/entities/idp/)
|
|
|
|
2. Go to the [keycloak admin console](https://keycloak.sharing-codeability.uibk.ac.at/auth/admin)
|
|
|
|
2. Navigate to *Identity Providers* (left sidebar)
|
|
|
|
3. Choose *Vienna University of Technology*
|
|
|
|
4. Scroll to *Validating X509 Certificates*
|
|
|
|
6. Insert X509 certificate from SAML entity and click save
|
|
|
|
|
|
|
|
|
|
|
\ No newline at end of file |
