Good afternoon. I set up an OAuth identity provider to work with my Dataverse installation (rctsai). It was working but now whan I try to login with RCTSAI dataverse presents a login form 'https://dados.ipb.pt//oauth2/firstLogin.xhtml', even thugh is nt the first login? What can I do to fix this? Thanks in advance
Huh. Was is working ok for a long time? For weeks or months?
Sometimes, sadly, the Identity Provider (IdP) will change their entityId. This makes Dataverse think it's a new IdP.
Philip Durbin said:
Sometimes, sadly, the Identity Provider (IdP) will change their
entityId. This makes Dataverse think it's a new IdP.
I contacted the Identity Provider (IdP) and they assured me that the 'entityId' did not change. How can I check what user's fields are matched with the response of the Identity Provider in order to identify users? It seems that dataverse does not recognize already registered users because user's fields do not match IdP returned data .
Thanks in advance.
Well, the logic seems to be in OAuth2LoginBackingBean.java
You might need to add more logging statements and recompile Dataverse. :thinking:
What version of Dataverse are you on?
For 6.0, here is the logic to login an existing user or prompt to create a new user: https://github.com/IQSS/dataverse/blob/v6.0/src/main/java/edu/harvard/iq/dataverse/authorization/providers/oauth2/OAuth2LoginBackingBean.java#L116-L137
I am in Dataverse v. 5.12.1 build 1122-cf90431. What do you suggest in order to quickly let users get in in the dataverse system
?
Ok, it's the same. Hasn't changed: https://github.com/IQSS/dataverse/blob/v5.12.1/src/main/java/edu/harvard/iq/dataverse/authorization/providers/oauth2/OAuth2LoginBackingBean.java#L116-L137
I'm suggesting adding more lines like this:
logger.log(Level.INFO, "debugging line here");
Philip Durbin said:
Ok, it's the same. Hasn't changed: https://github.com/IQSS/dataverse/blob/v5.12.1/src/main/java/edu/harvard/iq/dataverse/authorization/providers/oauth2/OAuth2LoginBackingBean.java#L116-L137
Is it possible to quickly disable signups?
Hmm, I'm not sure. I don't believe so.
Is there anything helpful or interesting in server.log?
In server.log I see the warning message
" [WARNING] [] [edu.harvard.iq.dataverse.util.BundleUtil] [tid: _ThreadID=75 _ThreadName=http-thread-pool::http-listener-1(3)] [tim>
Could not find key "authenticationProvider.name.rctsaai" in bundle file: ]]", can this be the problem? How can I fix it?
Interesting. You could edit src/main/java/propertyFiles/Bundle.properties but I doubt it will fix your problem, unfortunately.
@Adília Isabel Domingues da Cruz Alves actually, could you please go ahead and open up a support ticket by emailing support@dataverse.org ? And please let me know the ticket number.
Maybe you sent @Adília Isabel Domingues da Cruz Alves into the wrong rabbit hole...
@Adília Isabel Domingues da Cruz Alves which OAuth provider exactly are you using? If this is from your institution, did you mean OIDC?
Please note that remote users are identified by some persistent identificator
In case of OIDC, this is the "sub" attribute of the providers auth response.
I'm not sure right now what it is in case of OAuth2, would need to look into the code for that. And I would need to know which provider you're using exactly
Oliver Bertuch said:
Adília Isabel Domingues da Cruz Alves which OAuth provider exactly are you using? If this is from your institution, did you mean OIDC?
Our OAuth provider is FCCN (not our institution), We are using rctsaai.
@Adília Isabel Domingues da Cruz Alves hi, did you email support yet? It would be good to track this. If you did, I can't find the ticket number.
@Adília Isabel Domingues da Cruz Alves did you add a custom OAuth2 provider for that? Or did you use one of the existing implementations?
Oliver Bertuch said:
Adília Isabel Domingues da Cruz Alves did you add a custom OAuth2 provider for that? Or did you use one of the existing implementations?
I used the curl command 'curl -X POST -H 'Content-type: application/json' --upload-file rctsaai.json http://localhost:8080/api/admin/authenticationProviders' with the rctsaai.json that our OAuth provider sent us.
Philip Durbin said:
Adília Isabel Domingues da Cruz Alves hi, did you email support yet? It would be good to track this. If you did, I can't find the ticket number.
Hello Philip. I just emailed support. The tracking system ID of my message is #351508.
Thank you very much for your support.
Thanks, I see it at https://help.hmdc.harvard.edu/Ticket/Display.html?id=351508
@Adília Isabel Domingues da Cruz Alves did we meet in Braga? And in IRC or Matrix a while back? I think so. :grinning:
Philip Durbin said:
Adília Isabel Domingues da Cruz Alves did we meet in Braga? And in IRC or Matrix a while back? I think so. :grinning:
Hello Philip. Yes we meet in Braga :-) and in Matrix :-). How are you? :-)
Good. My daughter just rowed in a famous race in Boston, the Head of the Charles. She's on the far right in this pic: https://www.flickr.com/photos/136251156@N05/52449562353/in/album-72177720303110555/
her "game face", so serious :grinning:
Philip Durbin said:
Good. My daughter just rowed in a famous race in Boston, the Head of the Charles. She's on the far right in this pic: https://www.flickr.com/photos/136251156@N05/52449562353/in/album-72177720303110555/
She is still focused. Well done! Congratulations :-).
Last updated: Jan 09 2026 at 14:18 UTC