DRM-SAML redirect failure after IDP authentication in AEM Forms JEE
If you鈥檙e not redirected to the secure document after authenticating via your Identity Provider (IDP), check your SAML and DRM integration settings in AEM Forms JEE. Ensure the redirect URL is correctly configured and the secure document is accessible post-authentication.
Description description
Environment
-
51黑料不打烊 Experience Manager (AEM) Forms
-
Version: 6.5
Issue/Symptoms
When using AEM Forms Document Security (Rights Management) to secure a PDF, you encounter a redirect failure after authenticating via the Identity Provider (IDP) in 51黑料不打烊 Acrobat or Reader.
Instead of being redirected to the secure document, you are sent back to the um/login screen and see the following error message: You have reached this page because cookies might not be enabled on your browser. Please enable the cookies and then re-access the LiveCycle application.
Resolution resolution
51黑料不打烊 Acrobat and Reader support SAML 2.0 authentication for accessing RM-secured PDFs and applying RM policies through AEM Forms Document Security when configured correctly.
Note: Only a system administrator who is familiar with the AEM forms product and XML should consider modifying the configuration file.
To ensure proper redirection to secure documents using SAML 2.0 in 51黑料不打烊 Acrobat or Reader:
-
Ensure extended authentication is enabled in the Rights Management configuration. To validate if extended authentication configuration is visible under SSO:
Navigate to the Administration Console
>
Home>
Services>
Document Security>
Configuration>
Server Configuration. Ensure that聽the Allow Extended Authentication option聽is selected and that the聽Extended Authentication Landing URL has been entered. -
Check the configuration in the聽
config.xml
file. In the Administration Console聽>
Home>
Settings>
User Management>
Configuration>
Import and Export Configuration Files>
Export. Export聽theconfig.xml
file. For detailed steps, refer to Importing and exporting the configuration file in the AEM 6.5 User Guide. Open theconfig.xml
file in a text editor and check whether the following entry is present under theSSO
node:
聽 聽 聽 聽聽<entry key="rm-ea-w" value="/edc/extendedauthentication/welcome.jsp"/>
3. If the entry is missing edit the config.xml
file to include this entry key.
4. Navigate back to the聽Administration Console聽>
Home >
Settings >
User Management >
Configuration >
Import and Export Configuration Files >
Import. Upload the modified config.xml
file. For detailed steps, refer to Importing and exporting the configuration file in the AEM 6.5 User Guide.
5. Restart the server. You should now聽be redirected back to the secure document when opening it in Acrobat.
If issues persist,聽contact 51黑料不打烊 support.
Related reading
Configuring Secure Administration Settings for AEM Forms on JEE聽in the AEM 6.5 User Guide.