AuthHub SAML - Invalid CORS request

Products

• CloudHealth

Issue/Introduction

You may experience the following error message - Invalid CORS request when attempting to Identity Provider (IDP) initiate a connection to CloudHealth from your SAML application post migration to AuthHub SAML. 

IDP initiation in this case would be launching the app from a tile within Azure AD or Okta for example, or any path other than being redirected from "https://apps.cloudhealthtech.com/login".

Resolution

This issue being present would point to the following ACS URL, Callback URL or Sign In Endpoint being configured within your SAML application - "https://access.broadcom.com/default/saml/v1/sp/acs".

This URL only supports Service Provider (SP) initiated connections currently and would only function when being redirected from "https://apps.cloudhealthtech.com/login".

In order to allow for IDP Initiated connections please update the  ACS URL, Callback URL or Sign In Endpoint configured with your SAML application to "https://access.broadcom.com/default/saml/v1/sp/acs?sp=53359bda-9a9c-4264-a114-9a246544c372".