Unauthorized error after upgrade of Orchestrator

News Knowledge Base
, , , , , , , , , , , , , ,
1

Why unauthorized error is thrown and requires authentication for certain functions when opening an asset, after upgrading to version 2023.10.2? What changes in the new version could be causing this authentication requirement? Who can assist in resolving this issue so that the necessary functions can be accessed without authentication? When did this issue first occur and when can a resolution be expected?

Note: On the Event logs, this issue will be displayed with the following details:

Category: UiPath.Services.ServerAuthenticationModule.S2SAuthenticationHandler

EventId: 0

SpanId: 55e97793608f9908

TraceId: e15ed66cf28b4afd8ff39d98c5545eb1

ParentId: acc4e635552bcc52

RequestId: 80000065-0002-f900-b63f-84710c7967bb

RequestPath: /ResourceCatalog/Search/EntityTags/418dbb24-f743-4bba-bb12-1666c4b364d6

S2S authentication failed. Exception:

System.InvalidOperationException: IDX20803: Unable to obtain configuration from: 'https://orchestrator/identity.well-known/openid-configuration'. Will retry at '05/31/2024 6:19:39 PM +00:00'.

Exception: 'System.IO.IOException: IDX20807: Unable to retrieve document from: '[PII of type 'System.String' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. HttpResponseMessage: '[PII of type 'System.Net.Http.HttpResponseMessage' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]', HttpResponseMessage.Content: '[PII of type 'System.String' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'.

Root Cause: Issue present on the Resource catalog.

Resolution:
Note: Create a backup of any file before modifying.

  1. Navigate to the installation folder where the Orchestrator is installed, typically located at C:\Program Files (x86)\UiPath
  2. Go to the Resource Catalog folder, which can be found at C:\Program Files (x86)\UiPath\Orchestrator\ResourceCatalog

  1. Locate the file appsettings.Production.json and create a backup of it as it will be modified later

  1. Open the appsettings.Production.json file and find the "S2S" line

  1. Modifications are needed for the URL. It should match the URL in the appsettings.Production.json file located inside the Identity folder (C:\Program Files (x86)\UiPath\Orchestrator\Identity\appsettings.Production.json)

  1. Open the appsettings.Production.json file from the Identity folder and copy the URL from the "IdentityServerAddress" line

  1. Replace the "S2S" in the appsettings.Production.json file inside the Resource catalog folder with the newly copied URL

  1. After making the changes, double-check both URLs to ensure they match, and then proceed with restarting the IIS service

  1. Finally, log in to the website to verify that the error has been resolved.