SSO login results in 401 Unauthorized error

Products

• CA Agile Central SaaS (Rally)

Issue/Introduction

When using SSO to log into Rally, the login fails with a 401 Unauthorized error

HTTP ERROR 401 Unauthorized
  URI:   /slm/j_saml_security_check
 STATUS: 401
MESSAGE: Unauthorized
SERVLET: -

 

Environment

Release : SAAS

 

Cause

This can be caused by a mismatch in the Rally authentication database.

Resolution

There are a couple of ways to troubleshoot this:

1. We found that this can be an issue with which attributes for this specific user are being sent to your internal SSO system.  You may be able to work with your company's SSO team to get this fixed.  (ie:  an email address was being sent through SSO instead of the SSO or Rally username).    This can occur for a user even if they have previously been able to login to Rally using SSO.
2. Delete and recreate the user account.  If you wish to have support verify that there is a mismatch, then please open a support case and reference this KB article.