"An unspecified error has occured" trying to SSO to Cloud SWG Portal after successfully logging into IDP server

Products

• Cloud Secure Web Gateway
• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Admins login to Cloud SWG Portal via SAML IDP server.

Cloud SWG admins enter their credentials on the Portal, are redirected to the IDP server to Azure where they login successfully but instead of getting single signed onto the Cloud SWG Portal, they see the following "We are sorry" error message , indicating that "An unspecified error has occurred" and referencing login error 14 as shown below:

The issue happens on all browsers, and will happen regardless of whether the cache is cleared or not.

HAR files show successful SSO via SAML, followed by an eventual to the https://accounts.saas.broadcomcloud.com/oidc/redirect endpoint which triggers the above error.

Issue happening for all admins, across all Symantec Cloud products federating with the SAML Identity Provider.

 

Environment

Symantec Cloud components (Cloud SWG, CASB, SEP).

Federated login with SAML IDP servers.

Cause

Request into accounts.saas.broadcomcloud.com missing expected access token.

Resolution

Symantec authentication service admin needed to clear invalid state on for this federated account.

One of the intermediate authentication brokers was not generating the access token for this domain only.