SAML SSO troubleshooting. IdP-initiated login work...
# fleets
Shawn Maddock
08/25/2023, 6:03 PMSAML SSO troubleshooting. IdP-initiated login works perfect. For SP-initiated, when I click on "Sign on with [my IdP]", it immediately says "Authentication failed." Browser dev tools show an XHR POST to /api/v1/fleet/sso is returning a 500 internal server error. Where do I go to get more info and troubleshoot this further?
Shawn Maddock
08/25/2023, 6:03 PMI'm seeing the JSON response includes "IDP does not support redirect binding"... not sure what that means though
k
Kathy Satterlee
08/25/2023, 6:11 PMHey @Shawn Maddock. Can you check the Fleet server logs for corresponding errors? What provider are you using>
s
Shawn Maddock
08/25/2023, 6:11 PMMight have figured it out, this was not checked
Shawn Maddock
08/25/2023, 6:13 PMI'm not sure if I have the server log enabled? I only have status and results
k
Kathy Satterlee
08/25/2023, 6:14 PMThat would be piped to stdout/stderr by default
s
Shawn Maddock
08/25/2023, 6:15 PMAh, okay, that'd be in my journal then. Will look.
Shawn Maddock
08/25/2023, 6:16 PMJust has the same error: "InitiateSSO creating authorization: creating auth request: IDP does not support redirect binding"
Shawn Maddock
08/25/2023, 6:17 PMlemme try with that option enabled
Shawn Maddock
08/25/2023, 6:20 PMHmm, same error. Updated the metadata in app.yml, no change.
Shawn Maddock
08/25/2023, 6:21 PMIt's probably not reading that file now that it's initiated, right? Lemme change it in the DB
Shawn Maddock
08/25/2023, 6:22 PMWoot! That fixed it. 🙂
k
Kathy Satterlee
08/25/2023, 6:24 PMNice! Well done.
s
Shawn Maddock
08/25/2023, 6:26 PMNow to switch to using managed databases 😬
3 Views