SSO Login Failure with Saviynt Message

[Ryne_G]

We are configuring our environments for SSO using the Single Sign - On option in the UI as we were instructed by our TAM.

Everything is configured in Azure as the IdP along with the federated certificate XML being downloaded and added to Saviynt for the IdP file.

After activating SSO - we received the following issue from Saviynt

 This is the current Configuration in Saviynt

Confirmed that the test user trying to login via SSO did have the necessary SAVRoles for access as well. What needs to be updated / reconfigured in order to not receive the above issue?

[nimitdave]

@Ryne_G , can you confirm is SAML Request / Response are as expected using a SAML Tracer.

[Dhruv_S · Accepted solution]

@Ryne_G 

Please check the SAML Request/Response in SAML Tracer as suggested above. 

Also please refer to the below document for additional checks for troubleshooting.

Troubleshooting SAML SSO (saviyntcloud.com)

Please share the logs snippet if you see any error in logs.

Regards,

Dhruv Sharma

[Ryne_G]

Checked response in SAML tracer as stated. Reviewed the troubleshooting documentation as provided by @Dhruv_S 

The documentation and specifically the video provided by Saviynt for updating SAML certs when the IdP is Azure simply states to download the metadata xml. They do not mention anything about needing to reformat the xml file to match what Saviynt is expecting. Those steps provided should be updated to reflect that there is more work needed than to simply download the xml from Azure and then upload to Saviynt without needing any other reformatting steps. The correct format is at the below link.

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter06-EIC-Configurations/SAML-M...

[mohitarora1]

Please share screenshot of advanced configuration as well. The error screen is generic, to find the exact cause, please share the error from the logs as well.

Thanks,

Mohit Arora