Symantec VIP cannot enable MyVIP portal

Products

• VIP Service

Issue/Introduction

When attempting to enable MyVIP in place of SSP IdP, the MyVIP state never changes to 'Yes' and never provided the new URL.

Cause

The ssp.conf file is not getting updated correctly, it isn't adding the correct URLs at the end.

Resolution

The issue can be resolved by manually adding the correct lines to the ssp.conf file:

1. Stop the SSP service within the EGConsole
2. Create a backup of your existing ssp.conf file:
   • C:\Program Files (x86)\Symantec\VIP_Enterprise_Gateway\IDP\services\SSP\conf\ssp.conf
3. Add these 4 lines at the end of the ssp.conf file (just before the '# End VIPEGSSP section' line)

   • samlidp.enhancedSSP.enabled = Yes

   • samlidp.myvip.post.url = https://login.vip.symantec.com/viplogin/saml2/post/idp2fa

   • samlidp.myvip.relay.url = https://my.vip.symantec.com/api/authenticate-saml

   • samlidp.myvip.loa.url = https://login.vip.symantec.com   

4. Restart your SSP service within the EGConsole and refresh the page