Issue/Introduction:
Administrator sets up SAML as the external identity provider in Symantec App Center; however, user authentication fails.
Resolution:
Use the following suggestions to troubleshoot this issue:
- Verify that the content within your metadata file is accurate and consist with the SAML provider
- Entity ID
- X509 cert content
- SAML attributes
- Verify your App Center SAML configuration settings
- SP Entity ID must match the metadata and what is configured on the SAML provider
- The attributes in the Admin Console on the Settings > Authentication Options page must match the corresponding SAML attributes
- Time on the App Center must be synchronized with the SAML provider time. If the time differs for more than 5 minutes, authentication fails.
- Look for errors in the appstore.log
- Set Debug=True in the App Center settings_local.py to get more information
For more information, see SAML external identity provider (IDP) - Enterprise support solutions
Applies To
This knowledge base article applies only to SAML configurations that are not integrated with Symantec O3.