Identity Broker with Generic SAML 2.0 not working

Products

• VCF Operations

Issue/Introduction

• You are getting an error after configuring identity broker using Generic SAML 2.0
• Identity Broker is an external cluster, not embedded

Environment

• VMware Cloud Foundation 9.0.1
• VCF Operations 9.0.1
• VCF Identity Broker 9.0.1

Cause

• The broker is making an incorrect GET API request to the idP
• Tracing the request using SAML-Tracer plugin, you notice that the broker is making GET requests to the idP but sending only 1 parameter in the request (SAMLRequest)

Resolution

Broadcom is aware of this issue with VCF 9.0.1 and is expected to be addressed in a future release. If you believe you are experiencing this issue, please contact Broadcom Support to open a case and reference this KB article.