URGENT: IdP Federation Action Required to Enable new Single Sign-On (SSO)

Products

• Email Security.cloud

Issue/Introduction

You see the following alert after signing in, which prevents you from logging into the ClientNet Portal:

Environment

Email Security.Cloud, ClientNet

Resolution

If you have not received the email containing the Migration Tool link as outlined in KB article 386184, follow these steps:

1. Download your IdP metadata XML file
   Refer to the "Configuring Federation with a Partner IdP" section, specifically "Setup Aided by Support," in the KB Article 209272

2. Log a new case with Broadcom Support
   Attach the downloaded XML file to the support ticket.

3. Migration process

   • We will temporarily disable SSO enforcement for your account.

   • We'll upload the new XML file to our systems.

   • We will then provide you with updated ACS and Audience URI values.

4. Update your IdP configuration
   Replace the old ACS and Audience URI values with the new ones provided.

5. Login to the ClientNet Portal
   Once changes are made, sign in as usual.

6. Configure Federation Settings

   • Navigate to: Administration > Access Control

   • Scroll to “Login federation with your own identity solution”

   • Copy the value shown next to “IdP code of currently logged in user” (this is typically your domain name)

   • Paste this value into the “Enter IdP code” textbox and click Save

   • Enable “Federated login only” (Refer to: Federation and Single Sign-on for the ClientNet Portal)

7. Finalize and test

   • Log out of the ClientNet Portal

   • Test the login (we recommend clearing your browser cache and using a fresh session or Incognito window)

 

NOTE: For any changes to your IdP configuration, please contact your relevant IdP support team