Support Article
Unable to access IdP initiated authentication URL using Azure
SA-47873
Summary
Unable to access the Identity Provider (IdP) initiated authentication URL using Microsoft Azure. This results in log in failure.
Error Messages
Not Applicable.
Steps to Reproduce
- Configure PEGA-Azure AD integration through SAML 2.0
- Access the IdP initiated authentication URL
Root Cause
A software use or operation error. The Relay State URL in the IdP was incorrect.
Resolution
Perform the following local-change:
- Update the Relay State URL in IdP to reflect the correct SSO servlet. For example, https://<servername.com>/prweb/sso
- Enabling the following logger classes:
com.pega.pegarules.integration.engine.internal.util.PRSAMLv2Utils
com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ResponseSSOProfileValidator
com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ResponseProtocolValidator
com.pega.pegarules.integration.engine.internal.sso.saml.SAMLPostBindingHandler
Published March 29, 2018 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.