AthHub SAML - OneLogin - configured a connection to support both IDP and SP initiated logins.

Products

• CloudHealth

Issue/Introduction

SSO Migration to AuthHub SAML using OneLogin IDP is successful. Users are able to login to CloudHealth when login is initiated from IDP, but they are not able to when logging in via Service Provider (SP) initiated flow which is directly at https://apps.cloudhealthtech.com/ 

Resolution

The solution is populate the Recipient URL and ACS URL Validator:

Recipient URL:  https://access.broadcom.com/default/saml/v1/sp/acs 

ACS URL Validator:  https://access.broadcom.com/default/saml/v1/sp/acs?sp=53359bda-9a9c-4264-a114-9a246544c372  

See screenshot below for reference: