PowerProtect Data Manager — 升级后重新配置 OKTA SSO

Summary: PowerProtect Data Manager 更新从 19.13 到 19.14 后，OKTA SSO 不起作用。 热修复程序应用于 PowerProtect Data Manager 19.13 （PPDMESC-3304）

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

aaa.log：

./aaa.2023-08-23.0.log.gz:org.springframework.security.oauth2.jwt.JwtException: An error occurred while attempting to decode the Jwt: Signed JWT rejected: Another algorithm expected, or no matching keys found

 

Cause

aaa.log中的错误：

2023-08-24T07:39:26.964Z ERROR [] [https-jsse-nio-9090-exec-1] [][][][TRACE_ID:97d2704ca1652f50][] [c.e.b.a.s.s.DefaultSsoService.lambda$1(71)] - SSO login issue: {}
org.springframework.security.oauth2.jwt.JwtException: An error occurred while attempting to decode the Jwt: Signed JWT rejected: Another algorithm expected, or no matching keys found

这意味着 AAA 需要 HS256，这是其默认值，但 OKTA 始终返回 RS256 签名。

 

Resolution

  • 登录到 PowerProtect Data Manager ssh
  • cd /usr/local/brs/lib/aaa/config
  • vim application-sso.properties
  • 检查变量 aaa.sso.client.alg=RS256，如果不是，则从 HS256 更改为 RS256。
  • 退出 vim （：wq！）
  • AAA 重启

 

Article Properties
Article Number: 000218197
Article Type: Solution
Last Modified: 18 Mar 2025
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.