SAML Login Timing Issue and Suggestions for ControlUp DEX Environment Setup

A user encountered an issue while setting up the DEX environment, where first-time users attempting to login via SAML were receiving a "You don’t have permissions to view this page" error until they logged out and back in. This may require a support ticket to resolve, and the user suggests that SAML group memberships should be displayed in the User Settings – Roles list. Another user suggested that this could be a timing issue, as the initial role may not be known until after the first login. The initial issue was not resolved and will be revisited the following day.

Read the entire ‘SAML Login Timing Issue and Suggestions for ControlUp DEX Environment Setup’ thread below:

This is probably going to need to be a support ticket and a UserVoice request, but I’m going to ask here to see if my experience is unique first.

Just setting up the DEX environment. Got it enabled this afternoon. Got SAML configured. Sending Groups for Roles access.

First time users attempt to login via SAML they get "You don’t have permissions to view this page".

Logout and back in and things work as expected. I expect this will need to be a support ticket to look into it further.

Looking at the user account in the backend, the users that login and get Roles by SAML group membership show only Role "No Permissions", but they have full permissions granted by the Roles from the SAML groups. I expect this to be a UserVoice to get SAML group memberships to show in the User Settings – Roles list.

Feedback?

I know that there was still work being done in allowing for custom roles to be selected as the default role, but you seem to be looking for using a SAML role as the initial role. I’m wondering if this is a timing issue. We won’t know the role until we receive the first assertion from the user, so we don’t actually know what roles they belong to until after the first login. But I could be completely wrong about this, and @member can chime in

Thanks. I’m heading out for the day. I will see where we stand tomorrow.

Continue reading and comment on the thread ‘SAML Login Timing Issue and Suggestions for ControlUp DEX Environment Setup’.  Not a member? Join Here!