Federated SSO for Clinical Viewer demo is not working
Hi!
I'm trying to set up a Clinical Viewer demo env with HealthShare 2024.2.
I've done the standard installation following the doc :
- UCR - UCR demo with IHE
- CV - CV demo
Everything works until I get to the point where I have to enable federated SSO (UCR demo - Federated SSO). Once it is activated, I can no longer access the instance through the portal, and the browser displays the following error:.png)
Checking the messages.log, I see that every time I try to enable federated SSO and access the portal, I encounter the following error:
12/24/24-10:51:55:639 (98515) 2 [Utility.Event] Error in %ZHS.OAuth2.UI.Login:OnPreHTTP- ERROR #5809: Object to Load not found, class 'OAuth2.Client', ID '172.24.40.31-443-ucr-hs-instance'
I followed the doc step by step. Am I missing something here?
Thanks!
Comments
I ran into the same issue. I think it's related to the order in which the access gateway for the CV is activated; if you do it before setting up security (SSL/TLS) it won't register properly with the hub. I deactivated and reactivated the access gateway and that resolved the problem.
Hi Jeffrey, thank you for the reply.
Unfortunately, that doesn't seem to be the issue.
According to the documentation, I first install the demo UCR instance (with IHE) and then the CV instance. The SSO activation takes place right after the UCR installation, and I encounter the problem even before installing the CV instance. Once the SSO is enabled, I log out to check if it works, and I get the error I showed in the post.
I also tried to stop and start the accesd gateways on the UCR instance but doesn't solve the problem unfortunatly.
Are both instances on the same host, and if yes, have you set them up with instance prefixes (it looks like you have based on the screenshot). You may want to check all of your service entries in the registry and verify that they're pointing at the right instance.
And I know some of the OAuth2 artifacts are created on production start ... is at least the registry/hub running?
Yes, both are on the same host with the prefix.
The service registry is fine, all services have the FQDN and the instance prefix.
Yes, all the productiond are running.
I've never tried this with an IP address. When you configured Network Host Name and Secure Communication in the Installer Wizard, didn't you use a hostname?
Yes I used a host name on the instance VM.
I use the IP adress whem I'm connecting to the instance from the browser my local machine.
Ciao Fabrizio,
in your machine edit the hosts file and add the FQDN of your HS server so it can be resolved and then use the FQDN in the browser instead of the IP address.
Hi Enrico,
yes that was the issue, I modified the host file and everything works.
Thank you!
Using the FQDN from my machine resolved the problem.
Thanks to everyone for the help!