EDR: Some Users Unable to Authenticate or Login with SSO Enabled

[#1]

Environment

• EDR Server: All Supported Versions
• SAML SSO Enabled

Symptoms

• Some users are unable to authenticate or log in via SSO
• Coreservices log shows message

  <warning> cb.flask.blueprints.api_routes_saml - <username> authenticated but not authorized based on 'authorized' param: False.

Cause

Logic in attr_map.py for the 'authorized' parameter is not being met for the user

Resolution

 Verify that the expected authorized parameters are being sent over from the SAML provider

Additional Notes

• attr_map.py should show which field from the SSO/SAML reply is matched on
• Debug logging should help show what data is being sent over for the user request 

Related Content

EDR: How to enable Verbose Debugging for SSO/SAML
Troubleshoot SSO Integration