Error messages in OpenAthens Keystone
The following error messages might be produced by parts of the Keystone service and they are usually only seen during development. Any other error messages shouldn't be from Keystone itself - our service desk will be happy to help you diagnose them.
| Message | On domain | Caused by | Means |
|---|---|---|---|
| Unable to login this time, Please contact Service Desk | connect.openathens.net | A SAML authentication failure | The SAML response could not be processed. Very unlikely to come up unless and until you connect to other federations. |
| OpenId application not found with id $applicationId | connect.openathens.net | Application not found | The application your configuration references isn't there. Most likely caused by a typo when you copied over in the Client ID, but could also be caused by deleting the application record. |
| Could not find acs with saml2 post binding | connect.openathens.net | ACS not found for the specified connection | No Association Consumer Service bindings were found. Most likely caused by editing the bindings or deleting the connection. |
| Connection $ConnName is not associated with a federation | connect.openathens.net | Connection is not associated with a federation | You do not have any SAML federations connected. |
| Invalid rule type specifed | connect.openathens.net | Invalid rules | Most likely caused by obscure parts of a regex (uses Java regex) or there could be something in a javascript rule that prevents it running at all. |
| Entity $entityID not found | connect.openathens.net | Could not find IDP entity | The SAML Identity Provider is not in any of the SAML federations you have connected. |
Could not contact mds service Could not fetch connection $connectionId from CSP Could not fetch rules for connection $connectionId from CSP | connect.openathens.net | Internal server error | Something unexpected is happening at our end. Be a pal and let us know. |
Missing redirection URI Application is not associated with a connection Invalid client id | connect.openathens.net | Bad request | Something unexpected is happening with your OIDC client, e.g. it might be OpenID rather than OpenID Connect |
| Unable to process response for debug | login.openathens.net | Authentication exception contacting the ACS | The SP's Association Consumer Service is not playing along. May have been caused by editing your endpoint configuration. |
| Failed to contact admin API | login.openathens.net | The authentication point could not contact the OpenAthens back end to authenticate the user | Something unexpected is happening at our end. Be a pal and let us know. |