User authentication fails when Symantec App Center is configured to use SAML as the external IDP

book

Article ID: 157739

calendar_today

Updated On:

Products

Symantec Products

Issue/Introduction

Administrator sets up SAML as the external identity provider in Symantec App Center; however, user authentication fails.

Resolution

Use the following suggestions to troubleshoot this issue:

  • Verify that the content within your metadata file is accurate and consist with the SAML provider
    • Entity ID
    • X509 cert content
    • SAML attributes
  • Verify your App Center SAML configuration settings
    • SP Entity ID must match the metadata and what is configured on the SAML provider
    • The attributes in the Admin Console on the Settings > Authentication Options page must match the corresponding SAML attributes
  • Time on the App Center must be synchronized with the SAML provider time.  If the time differs for more than 5 minutes, authentication fails. 
  • Look for errors in the appstore.log
    • Set Debug=True in the App Center settings_local.py to get more information

 

 For more information, see SAML external identity provider (IDP) - Enterprise support solutions


Applies To

This knowledge base article applies only to SAML configurations that are not integrated with Symantec O3.