Hello,
We use a custom authenticator with XWiki to authenticate and authorize users via SSO. This works very well—except for one error:
For users who were automatically created in XWiki via SSO and the authenticator, an error message appears when the user profile is called up. This is displayed except for the custom notifications. The log contains the following information
2025-12-05 13:49:33.573:WARN :oejes.ServletChannel:qtp2134991632-18: /wiki/rest/liveData/sources/notificationSystemFilters/entries
jakarta.servlet.ServletException: javax.servlet.ServletException: org.glassfish.jersey.server.ContainerException: org.xwiki.livedata.LiveDataException: You don't have rights to access those information.
at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:412)
...
2025-12-05 13:49:33.573:WARN :oejes.ServletChannel:qtp2134991632-18: /wiki/rest/liveData/sources/notificationSystemFilters/entries
jakarta.servlet.ServletException: javax.servlet.ServletException: org.glassfish.jersey.server.ContainerException: org.xwiki.livedata.LiveDataException: You don't have rights to access those information.
at org.glassfish.jersey.servlet.internal.ResponseWriter.rethrow(ResponseWriter.java:256)
...
Caused by:
org.xwiki.livedata.LiveDataException: You don't have rights to access those information.
at org.xwiki.notifications.filters.internal.livedata.AbstractNotificationFilterLiveDataEntryStore.getTargetInformation(AbstractNotificationFilterLiveDataEntryStore.java:142)
The automatically created users have the same group permissions as users who were created “normally” in XWiki…
Users are created using
...
final Map<String, String> parameterMap = new HashMap<String, String>();
parameterMap.put(XWikiUser.ACTIVE_PROPERTY, "1");
parameterMap.put("first_name", user.commonName());
parameterMap.put("email", user.emailAddress());
parameterMap.put(XWikiUser.EMAIL_CHECKED_PROPERTY, "1");
final int returnValue_createUser = context.getWiki().createUser(xWikiUsername, parameterMap, "edit", context);
...
What could be the reason for this?