VIP ADFS authentication failed with exception System.Net.WebException

Products

• VIP Service

Issue/Introduction

In VIP ADFS integration, user authentication encounters the following certificate errors in the log file Log_VIPAuthProvider.txt:

Cert Public key 
Exception while signing the username : System.ArgumentOutOfRangeException: Length cannot be less than zero.
Parameter name: length
   at System.String.Substring(Int32 startIndex, Int32 length)
   at SymcVIP.AuthenticationAdapterWindowsAccountName.SignUserName(String vipUser)

While testing authentication using the VIP Integration Settings tool, the error message is returned as "User authentication failed with VIP service exception System.Net.WebException. The request failed with HTTP status 400: Bad Request".

 

Environment

VIP Service

Microsoft Active Directory Federation Services (AD FS)

Resolution

From product, below is the recommendation to resolve the issue:

• Access the URL https://userservices-auth.vip.symantec.com/vipuserservices/AuthenticationService_1_4 in a browser and verify whether the website certificate displays Broadcom information as expected.
  
  
  
  
  
  
• Engage the Proxy Server/Firewall team to review and verify the certificate configuration.