How to Deactivate the Rally SSO IDP connection / How to remove an old Rally SSO connection
search cancel

How to Deactivate the Rally SSO IDP connection / How to remove an old Rally SSO connection

book

Article ID: 367181

calendar_today

Updated On:

Products

Rally SaaS

Issue/Introduction

We have recently migrated to a new Identity Provider (IDP) and the old OKTA SSO IDP connection is no longer in use. However, it is still active and this is causing login issues for our users.  How can we remove our old IDP SSO connection?

Environment

RALLY SAAS

Cause

Rally OKTA SSO IDP contains a security token that is mapped to every Rally OKTA user profile.  When a new connection is established this security token gets updated in the OKTA user profile. However, keeping the old IDP active causes issues in Okta as it mismatches the security token and leads to OKTA 400 login issues.

Resolution

Please open a case with the Rally support team for deactivating the Rally SSO IDP connection.