Aman
Articles
-
How To: Migrate from SLO VAM to Native Single Logout in 24.04
Version Affected: 24.04 OverviewThis article explains how to migrate a realm from SLO VAM (the Virtual Appliance Module implementation of Single Logout) to native Single Logout, which is built into...
-
How To: Add the authnmethodsreferences Claim in WS-Fed/SAML to Avoid Double MFA with Microsoft 365
Version Affected: All OverviewThis article explains how to work around double Multi-Factor Authentication (MFA) prompts for Microsoft 365 (M365) users, by adding an authnmethodsreferences (AMR) cla...
-
How To: Restore a web.config Backup
Version Affected: All OverviewBy default, SecureAuth IdP saves a backup of a realm's web.config file whenever changes are made to that realm's configuration. If a configuration change produces an u...
-
How To: Deny Traffic to a Realm Without Deleting It
Version Affected: All OverviewThis article explains how to deny user traffic to an unused SecureAuth realm without deleting the realm itself. This change can be reverted at any time to allow traffi...
-
Troubleshooting: AnyConnect Embedded Browser Does Not Create a Device Fingerprint
Version Affected: All OverviewThe Cisco AnyConnect embedded browser does not create a device fingerprint for the user. CauseThis occurs when the Public/Private Mode option on the realm's Workflow ...
-
Troubleshooting: LDAP.DirectoryUserLookup Intermittently Fails for New Experience Realms
Version Affected: All OverviewLDAP.DirectoryUserLookup intermittently fails with "Exception: The user name or password is incorrect" for New Experience realms. CauseThis occurs when the Data Store...
-
Troubleshooting: OIDC Metadata Returns an HTML Error Along with Valid JSON Output
Version Affected: All OverviewThe OpenID Connect (OIDC) metadata endpoint returns an HTML error appended after the valid JSON output, when the request does not include a User-Agent header. For exa...
-
Troubleshooting: Authentication Loop Between SecureAuth IdP and a Federated Azure AD Data Store
Version Affected: All versions that support Azure AD as a data store OverviewAuthentication fails in an endless loop for realms configured with an Azure Active Directory (Azure AD) data store, whe...
-
FAQ: Why Does the Introspection Endpoint Say Consent Has Been Revoked for a Valid Token?
Version Affected: All OverviewThe debug logs show "[IntrospectionHandler].[ValidateJwt]: Consent has been revoked" for a token even when that token has a valid, unexpired lifetime. Why does this ha...
-
Troubleshooting: LDAPProvider Using LDAPS Breaks After Upgrading to 9.0.2 or Later
Version Affected: 9.0.2+ OverviewAfter upgrading or migrating a SecureAuth appliance, realms whose Data Store is configured to connect to LDAP using LDAPS (LDAP over SSL) time out during authentic...