Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

After login okta via saml, web page keep in "signing in to $web app name" #1308

Open
SimonChou-17LIVE opened this issue Oct 12, 2021 · 1 comment

Comments

@SimonChou-17LIVE
Copy link

Hi, I am using okta SSO -saml2.0 in my stf, but I meet some situations,
it blocked us to use STF

What is the issue or idea you have?

  1. Webpage status: After login okta via saml, web page keep in "signing in to $web app name" again and again

Do you see errors or warnings in the stf local output? If so, please paste them or the full log here.
stf logs show:
2021-10-12T06:36:26.467Z WRN/auth-saml2 16538 [*] Missing email in profile { issuer:
{ _: 'http://www.okta.com/exk43qcas7J6dWfTS696',
'$':
{ Format: 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity',
'xmlns:saml2': 'urn:oasis:names:tc:SAML:2.0:assertion' } },
sessionIndex: '_de1281da468bd8d62272',
nameID: 'acertalk01@cool.fr.nf',
nameIDFormat: 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',
nameQualifier: undefined,
spNameQualifier: undefined,
getAssertionXml: [Function] }

** expected behavior ""
After login in okta, web page can redirect to stf device list page

Please provide the steps to reproduce the issue.

  1. Create saml app

截圖 2021-10-12 下午2 47 36

截圖 2021-10-12 下午2 47 57

  1. Executed command: stf local --auth-type saml2
    --auth-options '[
    "--saml-id-provider-entry-point-url","https://cool-frstfttt.okta.com/app/cool-frstfttt_openstftest_1/exk43qcas7J6dWfTS696/sso/saml",
    "--saml-id-provider-issuer","http://www.okta.com/exk43qcas7J6dWfTS696",
    "--saml-id-provider-callback-url","http://localhost:7100/auth/saml/callback"
    ]'

My workspace environment
Mac OS Big sur

@SimonChou-17LIVE
Copy link
Author

Hi all,
I solved my issue, my solution is
chagned "Name ID Format" to "EmailAddress" and
add "email" which value is "user.email" to "ATTRIBUTE STATEMENTS"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant