SSO Configuration Save Failure Due to Stale Proxy in vIDB 9.1

Products

• VCF Operations

Issue/Introduction

• Unable to save the Single Sign-On (SSO) configuration in vIDB.
• The UI returns the following error when attempting to create the ADFS broker identity provider:
  Saving configuration settings failed with the following error: Unable to find certificate(s) chain 

Environment

• VMare Cloud Foundation (VCF) 9.1
• VMware Identity Broker (vIDB) 9.1

Cause

VMSP's proxy-service is routing outbound traffic through a stale and inactive parent proxy. The TLS handshake to terminate at this non-functional hop before completion, leading to the reported error.

Resolution

To resolve this issue, remove the legacy proxy server configuration from VMSP to allow direct outbound connections to the ADFS endpoint.

1. Access the VMSP appliance via SSH.
2. Review the current proxy settings by navigating to the VMSP management interface or checking the configuration files as specified in the documentation.
3. Remove the legacy proxy server configuration. Refer to the official documentation for specific commands: Configure a Proxy Server for VCF Management Services Components and VCF Automation.
4. Save the changes and restart the vIDB service if required.
5. Attempt to save the SSO configuration in the vIDB UI.