Troubleshooting SAML/SSO Login for Carbon Black Cloud

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

Steps to go through for most common Single Sign-On setup and login issues.

Environment

• Carbon Black Cloud Console: All Supported Versions

Resolution

1. If you've recently had SAML enabled, note that IDP Initiated logins (or logging in directly via clicking on a SSO tile) are not supported and will fail with "Permission Denied". A bookmark tile which takes the user to the console page to enter in their email can be used instead.
2. Confirm the SAML certificate is not expired.
3. If being redirected to access.broadcom.com or back to the Carbon Black Cloud login screen during login attempts check these steps.
4. If none of the above steps help, pull a .HAR file while reproducing the issue in an incognito Window and provide the .HAR file to support.

Additional Information

• Azure Setup
• Okta Setup
• PingIdentity Setup
• Google Setup
• Duo Setup