Federated admin user unable to login to WSS Portal due to expired password message

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

WSS Portal federated with an Okta SAML IDP Server, where WSS admins login via their Okta IDP server.

WSS Admin user is not able to login on WSS portal to view configuration.

After removing the user as an admin and re-adding, the user does get the automated email with link to click but clicking link returns the following password expiration message from login.broadcom.com despite user being a federated user:

 

Password reset cannot be done because we are not a local, but a federated user via SAML.

Environment

WSS Portal

Portal federated with SAML IDP server

Cause

Invalid flag for user set on the local WSS Okta instance.

Resolution

Contact WSS support team and have them work with Okta team to change user profile.