Federated admin user unable to login to WSS Portal due to expired password message

Products

• Web Security Service - WSS

Issue/Introduction

WSS Portal federated with an Okta SAML IDP Server, where WSS admins login via their Okta IDP server.

WSS Admin user is not able to login on WSS portal to view configuration.

After removing the user as an admin and re-adding, the user does get the automated email with link to click but clicking link returns the following password expiration message from login.broadcom.com despite user being a federated user:

 

Password reset cannot be done because we are not a local, but a federated user via SAML.

Cause

Invalid flag for user set on the local WSS Okta instance.

Environment

WSS Portal

Portal federated with SAML IDP server

Resolution

Contact WSS support team and have them work with Okta team to change user profile.