Error messages in OpenAthens Keystone

The following error messages might be produced by parts of the Keystone service and they are usually only seen during development. Any other error messages shouldn't be from Keystone itself - our service desk will be happy to help you diagnose them.  

Message

On domain

Caused by

Means

Unable to login this time, Please contact Service Desk

connect.openathens.net

A SAML authentication failure

The SAML response could not be processed. Very unlikely to come up unless and until you connect to other federations.

OpenId application not found with id $applicationId

connect.openathens.net

Application not found

The application your configuration references isn't there. Most likely caused by a typo when you copied over in the Client ID, but could also be caused by deleting the application record.

Could not find acs with saml2 post binding

connect.openathens.net

ACS not found for the specified connection

No Association Consumer Service bindings were found. Most likely caused by editing the bindings or deleting the connection. 

Connection $ConnName is not associated with a federation

connect.openathens.net

Connection is not associated with a federation

You do not have any SAML federations connected.

Invalid rule type specifed

connect.openathens.net

Invalid rules

Most likely caused by obscure parts of a regex (uses Java regex) or there could be something in a javascript rule that prevents it running at all.

Entity $entityID not found

connect.openathens.net

Could not find IDP entity

The SAML Identity Provider is not in any of the SAML federations you have connected.

Could not contact mds service

Could not fetch connection $connectionId from CSP

Could not fetch rules for connection $connectionId from CSP

connect.openathens.net

Internal server error

Something unexpected is happening at our end.

Be a pal and let us know.

Missing redirection URI

Application is not associated with a connection

Invalid client id

connect.openathens.net

Bad request

Something unexpected is happening with your OIDC client, e.g. it might be OpenID rather than OpenID Connect

Unable to process response for debug

login.openathens.net

Authentication exception contacting the ACS

The SP's Association Consumer Service is not playing along. May have been caused by editing your endpoint configuration.

Failed to contact admin API

login.openathens.net

The authentication point could not contact the OpenAthens back end to authenticate the user

Something unexpected is happening at our end.

Be a pal and let us know.