Unable to Set SSO Domain Due to Error "The supplied domain is invalid"

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Symptoms

While trying to set the SSO domain value, an error message is displayed: The supplied domain is invalid.

Cause

In Crowd 2.0 we introduced checks to ensure that the SSO domain being provided is the same as the one being currently used. This check is necessary to avoid administrators being locked out of the console.

Crowd stamps the domain value to the cookie being set. Since the browser will allow the page to access only the cookies with the same URL as the page, if the cookie is stamped with an invalid URL the administrator would be locked out.

Resolution

  • Make sure that the SSO domain being provided is the same URL as one used to access the Crowd console.

An example that works:

1 2 Crowd Console URL - [http://crowd.company.com] Valid SSO Domain - .company.com

An example that would fail:

1 2 Crowd Console URL - [http://localhost:8095] Invalid SSO Domain - .company.com
Updated on April 15, 2025

Still need help?

The Atlassian Community is here for you.