Unable to Set SSO Domain Due to Error "The supplied domain is invalid"
Symptoms
While trying to set the SSO domain value, an error message is displayed: The supplied domain is invalid
.
Cause
In Crowd 2.0 we introduced checks to ensure that the SSO domain being provided is the same as the one being currently used. This check is necessary to avoid administrators being locked out of the console.
Crowd stamps the domain value to the cookie being set. Since the browser will allow the page to access only the cookies with the same URL as the page, if the cookie is stamped with an invalid URL the administrator would be locked out.
Resolution
- Make sure that the SSO domain being provided is the same URL as one used to access the Crowd console.
An example that works:
Crowd Console URL - [http://crowd.company.com]
Valid SSO Domain - .company.com
An example that would fail:
Crowd Console URL - [http://localhost:8095]
Invalid SSO Domain - .company.com