Error: "Not Authorized" when logging into vcf.broadcom.com with a federated user

Products

• VCF Operations

Issue/Introduction

Logging into the VCF Business Service console (vcf.broadcom.com) returns the error "Not Authorized" when the user is federated on the Broadcom Support Portal.

Environment

VCF Business Service Console

Cause

This issue occurs due to a case sensitivity issue when pulling the profile for the user name.

Resolution

A fix is actively being pursued to address this issue.

Workaround 

To workaround this issue, customize the SAML token on the Identity Provider (IdP) to force lower / upper case.

For example, with Entra ID leverage Customize SAML token claims. Create a claim with the following parameters:

• Name = EMAIL
• Source = Transformation
• Transformation = ToLowercase() / ToUppercase() for the user.primaryauthoritativeemail attribute.
   ToLowercase(user.primaryauthoritativeemail)

Additional Information

Reference User faces 'Not Authorized' error during login if the user is not federated.