Carbon Black Cloud Login Gives "Invalid CORS request" Error After SAML Redirect

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Prevention
• Carbon Black Cloud Workload

Issue/Introduction

After logging in and being redirected to the IDP / SAMP provider, an error "Invalid CORS request" is received.

Environment

• Carbon Black Cloud
• Federated (SAML enabled) login

Cause

This can occur when AuthHub sends the SAML request to one URL (the configured login URL), but the response comes from a different URL.  Since the third party is changing origin URL, authhub rejects this.

Resolution

1. Collect a HAR File and HTTP Error Logs
2. Open a support case and provide the HAR file.
3. Support will analyze the request and add an exception for the unexpected origin URL.