Is there any way to see detailed logs in the cloud, to solve my SSO problems
Asked by Charlie Cramm:

Hello everyone,

I have added SAML SSO and activated an auth policy to enable and use SSO. I use keycloak and when I try to log in it redirects me to keycloak and I log in and it redirects me back. But then I get the following error:![Screenshot from 2024-06-26 15-49-38.png](/t5/image/serverpage/image-id/331866iD30001EEE8CFA696/image-size/large?v=v2&px=999 "Screenshot from 2024-06-26 15-49-38.png")

Is there any way to get a more detailed error message that tells me exactly why it's having trouble? I remember vaguely that back in the on-prem datacenter edition days you could log in to you server and use a string like this:

`a9bd4595-599f-4ead-b831-46ecd388cb1c`

to search in the logs and get a more detailed view of the problem`.`

Is there any way to do the same in cloud cause the only thing I see are the audit logs and they are not helpful.

Ill also share my mappers in keycloak in case my mistake is there.![Screenshot from 2024-06-26 15-59-41.png](/t5/image/serverpage/image-id/331867iEF92D4522F642FB1/image-size/large?v=v2&px=999 "Screenshot from 2024-06-26 15-59-41.png") `Thanks in advance!`


Answers:
author: Hector Menchaca
body: Hello [@Charlie Cramm](/t5/user/viewprofilepage/user-id/5529804) ,

Welcome to Atlassian Community!

Can you please attach a screenshot of the error with the browser URL included?

If you can do that for us I will be able to help or identify the problem.

Best Regards,

Thanks!

comments: author: Charlie Cramm
body: Hey [@Hector Menchaca](/t5/user/viewprofilepage/user-id/4769443)

Of course:

![Screenshot from 2024-06-26 16-09-34.png](https://community.atlassian.com/t5/image/serverpage/image-id/331872iD6630FABEABC89A5/image-size/large?v=v2&px=999 "Screenshot from 2024-06-26 16-09-34.png") [https://id.atlassian.com/error?error=access_denied\&error_description=Invalid%20thumbprint\&state=eyJjc3JmVG9rZW4iOiIwYmI3MjBiYy0zZGY1LTRmMDItOWQ2Yi01NjBjMzdmZTM1OWYiLCJhbm9ueW1vdXNJZCI6ImE5YmQ0NTk1LTU5OWYtNGVhZC1iODMxLTQ2ZWNkMzg4Y2IxYyIsImNvbnRpbnVlVXJsIjoiaHR0cHM6Ly9zdGFydC5hdGxhc3NpYW4uY29tLz91dG1fc291cmNlPWlkZW50aXR5IiwicXVlcnkiOiI_Y29ubmVjdGlvbj1zYW1sLTY0YTFlNDgyLTcyZTgtNDRiMi1iNTY5LTgzYjg0YzhlZTFjYyJ9](https://id.atlassian.com/error?error=access_denied&error_description=Invalid%20thumbprint&state=eyJjc3JmVG9rZW4iOiIwYmI3MjBiYy0zZGY1LTRmMDItOWQ2Yi01NjBjMzdmZTM1OWYiLCJhbm9ueW1vdXNJZCI6ImE5YmQ0NTk1LTU5OWYtNGVhZC1iODMxLTQ2ZWNkMzg4Y2IxYyIsImNvbnRpbnVlVXJsIjoiaHR0cHM6Ly9zdGFydC5hdGxhc3NpYW4uY29tLz91dG1fc291cmNlPWlkZW50aXR5IiwicXVlcnkiOiI_Y29ubmVjdGlvbj1zYW1sLTY0YTFlNDgyLTcyZTgtNDRiMi1iNTY5LTgzYjg0YzhlZTFjYyJ9)


author: Hector Menchaca
body: [@Charlie Cramm](/t5/user/viewprofilepage/user-id/5529804)

Thanks for your reply!

That error tells us that the certificate is expired, to renew it please follow the next steps:

* 1. Go to [admin.atlassian.com](http://admin.atlassian.com/)\<<http://admin.atlassian.com/>\> and select your organization.
* 2. Go to Identity Providers and open your SAML configuration
* 3. Go to your IdP Dashboard and download a new x64 certificate.
* 4. Go to your SAML Configuration and update the x509 certificate field with the new certificate.


author: Charlie Cramm
body: Hey [@Hector Menchaca](/t5/user/viewprofilepage/user-id/4769443)

Yes thank you it works now.

And I'll thank you once more for your speedy responses.