Login denied by identity provider error for Web Isolation Cloud

Products

• Web Isolation Cloud

Issue/Introduction

Logging into the Web Isolation Cloud management console using a SAML provider results in the error 'Login denied by identity provider. Check settings.'

 

Cause

SAML assertion encryption is enabled in the Identity Provider's configuration with an algorithm that is not supported by Web Isolation Cloud.

Resolution

Web Isolation Cloud supports the following SAML assertion encryption algorithms:

AES256-CBC

AES128-CBC

TRIPLEDES-CBC

 

Select one of these algorithms in the Identity Provider's settings and perform a full login (this may require clearing browser cookies for your IdP login URL).