SSO : The request was rejected because the URL contained a potentially malicious String "%25"

Question

Hello Community,
 
We are trying to enable SSO on Thingworx with AD FS. When we access Thingworx it throw below error message 
 
[L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ???] [S: ] [P: ] [T: https-openssl-nio-443-exec-19] [ The request was rejected because the URL contained a potentially malicious String "%25" ]
[L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ???] [S: ] [P: ] [T: https-openssl-nio-443-exec-10] [ Error validating SAML message ][ NameID element must be present as part of the Subject in the Response message, please enable it in the IDP configuration ]
[L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ???] [S: ] [P: ] [T: https-openssl-nio-443-exec-7] [ Error validating SAML message ][ NameID element must be present as part of the Subject in the Response message, please enable it in the IDP configuration ]
[L: ERROR] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: ???] [S: ] [P: ] [T: https-openssl-nio-443-exec-16] [ Failed to utilize the SSO component for authentication ][ The request was rejected because the URL contained a potentially malicious String "%25" ]
 
Could someone help me on this
 
Thanks
VR

Velkumar · Accepted Answer

With support of PTC, we managed to fix the issue.

Error Message :

[ The request was rejected because the URL contained a potentially malicious String "%25" ]

In sso-settings.json, file path was mentioned using backslash "\\" changed to frontslash "//"

Example :

Instead of

"C:\\PTC\\idp-metadata.xml"

use

"C://PTC//idp-metadata.xml"

For error message :

[ Error validating SAML message ][ NameID element must be present as part of the Subject in the Response message, please enable it in the IDP configuration ]

Add NameID in SAML response subject. This should be changed in IDP side

For AD FS refer below link

Authentication Failed: Error validating SAML message : NameID element must be present as part of the Subject in the Response message, please enable it in the IDP configuration - Progress Community

/VR

Surya_Tiwari · Answer

Hi @Velkumar Remove special characters "%", ";", "\", "/" from file name

Check documentation Windchill Help Center > Windchill Fundamentals > Working with Windchill Objects > Object Overview > Special characters

Sign up

Please use your PTC eSupport account.

Welcome to the PTC Community

Please use your PTC eSupport account.

Scanning file for viruses.

This file cannot be downloaded