EDR: Metadata Cannot Be Generated When Setting Up SSO

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Entering command, "sudo /usr/share/cb/cbssl sso --make-metadata > /tmp/cb-metadata.xml" causes error:

No Metadata: Single Sign-On is not configured

Environment

• EDR Server: All Versions
• SSO Integration

Cause

SSO has not been enabled.

Resolution

Enable SSO within /etc/cb/cb.conf by editing the "SSOConfig" parameter to point directly to the new SSO configuration file path.

Additional Information

• EDR focuses on the SSOConfig parameter within /etc/cb/cb.conf to determine if SSO has been enabled for the EDR Server.
• The 7.4 EDR Integration Guide covers how to set up SSO for various integrations on pages 45-50.