search cancel

Direct access to Modern UX when SAML SSO is active

book

Article ID: 229367

calendar_today

Updated On:

Products

Clarity PPM On Premise

Issue/Introduction

Is it possible to directly access the Modern UX (/pm) when SAML SSO is active?

Environment

Release : 15.9.2

Component : CLARITY SECURITY INTEGRATION

Resolution

It is not currently possible to use the /pm url directly without authentication when SAML SSO is enabled. Using http(s)://ppm.server.com/pm would result in an authentication error if they are not already logged in.

Workaround: It is possible to create a URL and ask users to bookmark it.

  1. Take the New UX URL. e.g.: http(s)://ppm.server.com/pm
  2. Encode the above URL using a URL encoder tool. The result would be something like: http%3A%2F%2Fppm.server.com%2Fpm
  3. Take the Classic UI URL and append it using the RelayState parameter:
    • Classic UI URL: http://ppm.server.com
    • RelayState Parameter: RelayState=http%3A%2F%2Fppm.server.com%2Fpm
    • Resultant URL: http://ppm.server.com?RelayState=http%3A%2F%2Fppm.server.com%2Fpm
  4. If users use the Resultant URL they are authenticated if they aren't and are navigated to New UX.

Note: This solution works well when there is no default relay state set on the IDP.