can't sync bookmarks in chromium using canonical sso
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical SSO provider |
Invalid
|
Undecided
|
Unassigned |
Bug Description
Since our canonical e-mail is also a google username, I was able to use
this to sync work browser bookmarks with my account. I recently re-
installed a new machine and cannot log into my account (which
authenticates via ubuntu-sso).
How to reproduce:
1) Click 'sign into chromium'
2) Enter '<email address hidden>' as username and something as password
3) You are re-directed to ubuntu-one log-in, log in and enter second
factor info
4) You'll get an oops as follows.
Oops!
Sorry, something just went wrong in Ubuntu One.
We’ve recorded what happened, and we’ll fix it as soon as possible.
Apologies for the inconvenience.
OOPS ID: OOPS-24f08dd22b6148afb34bbaab9d0bd57d
Sentry ID: 77484bb288e3406
Changed in canonical-identity-provider: | |
status: | New → Confirmed |
"None of the processors in SAML2IDP_REMOTES could handle this request."
Every SAML processor in the list raised CannotHandleAss ertion in can_handle
Either the base _validate_request() raised it (no saml2idp_metadata remotes has the same acs_url (as ...?) ), or the ACS URL doesn't have ".google.com/a/" in it. Impossible to tell because exceptions are thrown away.