SSO Certificate Failed With Generic Error: Failed to import metadata

Products

• Clarity PPM On Premise

Issue/Introduction

Ahead of SSO certificate expiry, the generated SSO certificate needs to be imported.

Steps To Reproduce:
1. Download the certificate(s).

2. Go to Modern > Administration > Authentication & Keys > SAML Configurations

3. Add a configuration instance by clicking on the icon(Import Identity Provider Metadata

4. Fill out the SAML Configuration identifier and name and click button 'Upload IDP metadata'

Expected: It should import successfully.

Actual: "Failed to import metadata" toaster message is displayed.

Resolution

There is an issue with the content of the XML.
Review the content and make sure the required elements exist and in the correct location with valid values.

Examples can be reviewed in the APP logs, e.g.

ERROR 2025-01-16 22:21:05,686 [http-nio-5432-exec-63] ppm.rest (clarity:user:session:PPM_REST_API)  Error occured during create of saml config
com.niku.union.odf.exception.ODFValidationException: IDP certificate is required.

ERROR 2025-01-16 22:21:05,687 [http-nio-5432-exec-63] ppm.rest (clarity:user:session:PPM_REST_API) 
com.ca.ppm.rest.exception.APIAppException: Unable to save SAML configuration.