I am trying to use salesforce federated single signon feature. I am using Glassfish server and OpenSSO 8.0

While logging in using OpenSSO, I am getting the following error:

Login Error Your login attempt using single sign-on with an identity provider certificate has failed. Please contact your salesforce.com administrator for more information.

Can anyone suggest any solution regarding this ?

  • Hi can you guide me in configuring Open SSO ,i am struggling with it .I have Installed Glassfish server.All I need now is to config Open SSO Commented Sep 18, 2013 at 9:40

1 Answer 1


In the org, go to Setup | Security Controls | Single Sign-On Settings and click the SAML Assertion Validator button. If the SSO attempt got as far as your org, you should see something there that will lead you towards identifying the problem.

If there is nothing listed in the SAML Assertion Validator, then Salesforce is not able to identify the correct org from the assertion. Go into the OpenSSO logs, copy the SAML assertion, and paste it into the SAML Assertion Validator. Again, this should lead you towards resolution.

  • Thanks metadaddy, I was able to find the cause of the error. I had provided Universal ID of different subject of Open SSO in salesforce user's Federation ID field and was trying to login from a different subject's credentials. That's why it was giving error. Once I tried to login from the same subject, it worked fine. Thanks again for your response.
    – S.Sharma
    Commented Sep 11, 2012 at 17:01
  • How do i get to the OpenSSO logs? Commented Oct 10, 2013 at 4:37
  • @nivyaj docs.oracle.com/cd/E19681-01/820-3885/gjqdm/index.html
    – metadaddy
    Commented Oct 10, 2013 at 5:11

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .