User guide

Error Handling
6-3
SSO Administrator
The SSO administrator must perform the following steps as necessary:
• Change the SSO repository settings
• Investigate and change the authentication server settings
• Investigate and change the repository server settings.
When receiving an investigation request or a request to change settings from the business server
administrator, the SSO administrator must investigate the cause of the error or change settings,in the
following order:
1. When receiving a request to change settings from the business server administrator, check the
status code displayed on the Web browser, and change the settings according to [SSO
Administrator Action] in "Status Codes Reported from the Browser" of Messages.
2. When receiving an investigation request from the business server administrator, check the "Trouble
detection date and time" and "User ID or certificate used for authentication" that were posted by the
business server administrator. Then refer to the authentication server access log to remove the
cause of the error.
Refer to "Access Log of the Authentication Server" of "Access Log In Single Sign-on Mode" of
"Messages Logged and Output in Single Sign-on" of Messages for details of the access log of the
authentication server.
3. If the cause of the error cannot be identified from the authentication server access log, refer to the
authentication server system log and remove the cause of the error.
Refer to "sso02000 to sso02050" of "Messages with Message Numbers Beginning sso" of
Messages for details of the system log of the authentication server.
4. If the cause of the error cannot be identified from the authentication server system log, check the
"Trouble detection date and time" and "User ID or certificate used in authentication" that were
reported by the business server administrator. Then refer to the repository server access log and
remove the cause of the error.
Refer to "Access Log of the Repository Server" of "Access Log In Single Sign-on Mode" of "
Messages Logged and Output in Single Sign-on " of Messages for details of the access log of the
repository server.
5. If the cause of the error cannot be identified from the repository server access log refer to the
repository server system log and remove the cause of the error.
Refer to "sso01000 to sso01080" of "Messages with Message Numbers Beginning sso" of
Messages for details of the system log of the repository server.
Log output destination
The logs of the Single Sign-on system are output to the following destinations:
• Output destination of system log
Event viewer (application log)