SAML SSO setup

[DK]

Trying to configure the SAML sso, before testing the SAML sso, wanted to have access to the "/ECM/login/authsaviynt" so that this can be used as alternate login if the SAML authentication failed.

enabled "localAuthEnabled" for user, provided this while testing the "/ECM/login/authsaviynt" url getting access denied error, looks like this particular url is blocked from saviynt.

how to enable this url ? 

[Manu269]

Can you refer following article and see if this helps : https://saviynt.freshdesk.com/support/solutions/articles/43000641546-configuring-saml-based-single-s...

[DK]

Hi,

The instructions were followed for this setup.  But the moment SAML is enabled it will take out the current log-in approach and in case SAML fails then there should be an alternate login method to disable the SAML or to fix this issue.

[rushikeshvartak]

Please try following URL:

https://<saviynt instance>/ECM/login/authsaviynt

change <saviynt instance> as per your instance url.

Make sure:

1) Non SSO ID has proper SAV role

2) Run following custom query job:

Update users set localAuthEnabled=1 where username='<username>';

change <username> as per your requirement

[DK]

Hi,

The user has already ROLE_ADMIN, hope the user dont need any other role.  If any additional role is needed, then provide the details.

[rushikeshvartak]

Follow step 2 from above

[DK]

Hi Rushikesh,

all the steps are followed. Still not work and getting error as below 

Access Denied

You don't have permission to access "http://<client>.saviyntcloud.com/ECM/login/authsaviynt" on this server.

Reference #18.44e6ca17.1668399837.31be5931

[rushikeshvartak]

Try with IP Address

[HelmutSeidl]

@DK I am wondering if this ultimately worked, as I am facing the same challenge/question. 

[Falcon]

https://<saviynt-tenant>/ECM/login/authsaviynt is not available over internet / public network. Please open a freshdesk ticket to disable SSO if required.