Discussions

Ask a Question
Back to all

How to debug "Error validating SSO"?

Hi,

We're trying to implement SSO for customers to access our CF2 Customer Center.

We have implemented the JWT token generation in PHP and verified at https://www.jwt.io/ that the token generated can be decoded, and the signature verified against our secret key. The values for nbf, exp and iat all correspond to sensible times (as checked on that page), and cover the window of time in which we're testing the link.

As far as we can see, the token is valid and signed, using the JWT key provided in our account, the customer email corresponds to an existing CF2 contact, and the link has the correct format i.e.

https://secure.ourcustomdomain.com/[email protected]&strategy=email&token=TOKEN

However any links generated give a blank page with error message "Error validating SSO".

How can we troubleshoot this further?

We do have a custom domain configured, which is shown beneath the "Customer Center Settings" heading on the page for configuring the Customer Center (where the JWT key is provided). We've tested using that custom domain in the JWT token generation and link, and also with our "myworkspace12345b.myclickfunnels.com"-type URL that the CF2 admin interface lives at. Both produce the same error.

We also tried using jwt.io to generate the token rather than our PHP code, and manually constructed the link using its generated token. Same error.

Any help would be appreciated!