Promoted articles

• SecureAuth Non-Production Environment Policy

  SecureAuth provides a limited, non-production i...

• Announcing the SecureAuth Identity Platform!

  We are excited to share that the SecureAuth® Id...

• Standard Global Support & Maintenance Policy

  (Updated June 15, 2020) Introduction SecureAuth...

• Support Lifecycle Policy and End of Life Dates

  SecureAuth® Identity Platform Product Lifecycle...

• SecureAuth Identity Platform Upgrade Process

  This guide assists customers preparing to upg...

• PFX Certificate - Invalid Public Key Security Object File

  Description:  After downloading a PFX Certifica...

• SecureAuth IdP Setup Utility throws the error "Could not establish a connection to the Internet" after entering activation code

  Version Affected:  All Description:   When inst...

• How do I know which Active Directory Attribute can be used for each IdP Datastore Profile Property?

  Version Affected:  All   Description: To Read/W...

• 504 Gateway Timeout for certain users

  Version Affected:  19.07.01+ Description:    ...

• Error Retrieving Contact Information for realms using Webservice

  Version Affected:  All Description:   When acce...

• ‘Error Retrieving Contact Information’ after attempting to login to a Dual Datastore New Experience Realm

  Version Affected:  22.02 HF2+  Description:   A...

• How to use Test Tool for Epic EPCS VAM

  Description:   The Epic EPCS VAM (Electronic Pr...

• MultiDatastore (WebService) realm failing to connect to Data realm

  Version Affected:  All Description:   Webservic...

• RADIUS Server Processing Error Decrypt Value Can't Be Empty

  Version Affected:  RADIUS Server 2.x+ Descripti...

• RADIUS Server Processing Error NullPointerException

  Version Affected:  RADIUS Server v2.x+ Descript...

• Some Users prompted for MFA despite using Fingerprinting

  Version Affected:  All Description:   On a real...

• Classic to New Experience Realm Migration does not show all Classic Realms

  Version Affected:  22.02 HF2 to HF8 inclusive22...

• Realm is missing in Classic Experience but still visible in New Experience

  Version Affected:  19.07.01+ Description:   Whe...

• Dashboard no longer showing metrics

  Version Affected:  19.07.01+ Description:   Whe...

• Mobile and OTP devices not Showing in Helpdesk / Self Service realms

  Version Affected:  21.04 + Description:   Since...

• Why does the New Experience realm creation only allow to realm 990 and not the full 999?

  Version Affected:  19.07.01+ Description:   Whe...

• Bulk installation, upgrade and reconfiguration for 'Login for Windows'

  Version Affected:  9.2+ Description:  This arti...

• ADFS VAM on Windows Server 2019 and Content Security Policy

  Version Affected:  ADFS VAM on Windows Server 2...

• After setting maxQueryString and maxURL within IIS Manager, you may be presented with the same 404 error message

  Version Affected:  9.2+ Description:   When att...

• How to enable Dynamic IP blocking with WSTrust

  Version Affected:  20.06 onwards Description:  ...

• Can I use wildcards in the Redirect URI of an OAuth realm?

  Version Affected:  20.06+ Description:   When c...

• HSTS error when accessing the Admin Console via Localhost

  Version Affected:  All Description:   After cha...

• "Login Failure Authorization grant or refresh token is invalid" error with Epic Haiku

  Version Affected:  All Description:   When usin...

• Admin pages in New and Classic experience not loading. White page or partial loading occurs.

  Version Affected:  9.2 - 20.06 Description:   O...

• 'This security key doesn't look familiar' error is thrown when using a Yubikey for MFA

  Version Affected:  9.x+ Description:   After en...

• Is it possible to create a New Experience Realm by copying an existing New Experience Realm?

  Version Affected:  21.04+ Description:   Is it ...

• Can not view Mobile Devices when users login to a Self-Service realm

  Version Affected:  21.04+ Description:   When u...

• 404 when trying to use URL enrollment

  Version Affected:  SecureAuth Identity Platform...

• OpenID server_error: An error was encountered. "Error occurred during a cryptographic operation."

  Version Affected:  All Description:   When a Us...

• SecureAuth API allowed Clock Skew

  Version Affected:  All Description:   The Secur...

• OIDC with Internal and DMZ combination fails for internal users

  Version Affected:  19.x onwards Description:   ...

• FIDO updates/changes do not take effect when an end-user saves

  Version Affected:  20.06+ Description:   When a...

• Admin Realm will not load with error stating HSTS is enabled

  Version Affected:  All Description:   When brow...

• IWA not working on Chrome and Chromium Edge

  Version Affected:  All Description:   Despite W...

• How does the SecureAuth RADIUS Server process rules?

  Version Affected:  ALL Description:   When havi...

• How to configure Filebeat to use a proxy

  Version Affected:  9.2+ Description:   How to c...

• How to enable debug logging for the Filebeat service

  Version Affected:  9.2+ Description:   How to e...

• Filebeat service keeps stopping unexpectedly

  Version Affected:  9.2+ Description:   The File...

• When attempting to enroll in FIDO2, Debug.log shows error "502 Bad Gateway"

  Version Affected:  20.06+ Description:   Each c...

• January 2022 - Windows Server Patches causing issues with Domain Controllers, Hyper-V, and ReFS Volumes

  Microsoft released several KBs for January 2022...

• How to enable "Use Client Source IP Address" manually in SecureAuth RADIUS

  Version Affected:  RADIUS 20.12.07 Description:...

• Ubuntu Teams integration continuously restarts during sign-in

  Version Affected:  [All] Description:   When Ub...

• Authenticating to a Client-Side SSL realm may prompt to select certificate several times

  Version Affected:  All Description:   Authentic...

• RADIUS 20.12.07 not working after upgrade

  Version Affected:  RADIUS 20.12.07 Description:...

• HowTo: Upgrade the SecureAuth RADIUS server.

  Version Affected:  19.x+ Description:   This ar...

• SAMLSPInitPost with Citrix Integrations

  Version Affected:  20.06  Description:   When u...

• Logging to the SecureAuth SQL logging database stops

  Version Affected:  All Description:   When usin...

• SP init by Post failing with generic "Error has been logged"

  Version Affected:  All Description:   Attemptin...

• Where can I find a report of users enrolled for a certificate?

  Version Affected:  All Description:   Where can...

• What happens when a disabled account attempts to log in to SecureAuth?

  Version Affected:  All Description:   A user's ...

• OWA redirect loop on owa/auth/errorFE.aspx?httpCode=404

  Version Affected:  All Description:   After aut...

• MFA options missing in VPN client configured with RADIUS

  Version Affected:  21.04+ Description:   When s...

• Update Web.config results in Server Error: System.Xml.XmlException: An XML comment cannot contain '--', and '-' cannot be the last character.

  Version Affected:  All Description:   When perf...

• Reviewing Post Data on a Submit Forms Post realm

  Version Affected:  All Description:   The Admin...

• After upgrading, all WebService realms fail with INCORRECT_USERPASSWORD

  Version Affected: 9.3.0-22, 19.07.01-31, 20.06-...

• Login for Windows not showing proper MFA options

  Version Affected:  All Description:   While att...

• Compiler Error Message: BC30451: 'DatabaseFactory' is not declared. It may be inaccessible due to its protection level.

  Version Affected:  All Description:   When atte...

• Is it possible to install Qualys agent on a SecureAuth IdP

  Version Affected:  All Description:   Is it pos...

• Server Error for non-base 64 character, padded characters, or an illegal character among the padding characters occurs for specific users

  Version Affected:  All Description:   Upon logg...

• SecureAuth Connector troubleshooting

  Version Affected:  All (Cloud only) Description...

• 403 Error is thrown after typing in Username on a CORS enabled realm

  Version Affected:  All Description:   At first ...

• RADIUS slowness

  Version Affected:  20.06+ Description:   RADIUS...

• Multiple Tabs to the same Realm causes Anti Forgery error

  Version Affected:  19.07+ Description:   When a...

• DocuSign error "The Federated identifier for single sign-on does not match what has been enabled for this user"

  Version Affected:  All Description:   Saml inte...

• How to speed up RADIUS authentication when users are members of many groups

  Version Affected:  All Description:   If users ...

• Issues signing into realm. Several attempts required.

  Version Affected:  All Description:   Several s...

• Links to IdP Realms or Service Providers embedded in Office documents fail

  Version Affected:  All Description:   When an O...

• MS Print Spooler vulnerability

  Version Affected:  All Description:   Microsoft...

• How to Clear Log Files in Bulk older than X days

  Version Affected:  All Description:   How to us...

• HTTP Error 500.19 - Internal Server Error during SISU

  Version Affected:  19.07.01+ Description:   Whe...

• Password Reset functionality breaks when Referrer-Policy header is added to IIS response headers

  Version Affected:  All Description:   Password ...

• TOTP not working with Login for Windows

  Version Affected:  All Description:   When tryi...

• How to exclude OUs from SecureAuth

  Version Affected:  All Description:   When sett...

• Using a custom theme, the username and/or password fields do not appear when loading the realm

  Version Affected:  9.3+ Description:   When usi...

• High CPU usage for FileBeat in IdP 9.2

  Version Affected:  9.2 Description:   FileBeat ...

• Not in whitelist or domains in whitelist are malformed

  Version Affected: 9.2+   Description:   A WSFed...

• Server Certificate was not found. Please check web.config

  Version Affected:  All Description:  When acces...

• 20.06 Login Delay when IdP is behind a proxy

  Version Affected:  20.06 Description:   When at...

• Resetting Azure password may cause MFA issues for Teams

  Version Affected:  ALL Description:   After res...

• QR Enrollment error

  Version Affected:  All Description:   When atte...

• How To: Use the Saml Consumer with a WSFed realm, retaining the AuthN.

  Version Affected:  All Description:   Office Ap...

• Manuals and Hardware Specifications for Physical Appliances

  Version Affected:  All Description:   What are ...

• Yubikey HOTP suddenly stopped working

  Version Affected:  All Description:   Yubikey H...

• MFA.WebControls.MFAUserIDView.HandleDefaultCase: Thread was being aborted

  Version Affected:  9.1-20.06 Description:   The...

• 'ExtendedSAMLAttrValueComboBox' has a SelectedValue which is invalid because it does not exist in the list of items. Parameter name: value

  Version Affected:  All Description: When select...

• HowTo: Set a longer timeout on Admin Realm

  Version Affected:  ALL Description:   The defau...

• SecureAuth Updater will not launch on IdP server.

  Version Affected:  ALL Description:   When atte...

• SP Initiated realm giving 404 error

  SecureAuth IdP Version affected: All Descriptio...

• OVA file not deploying properly after downloading from SecureAuth

  Version Affected:  19.07+ Description:   After ...

• Create a Redirect from any Realm to a new Realm

  Version Affected:  ALL Description:   In certai...

• Radius Warning message WARN IdPAPIAccess Details: The requested resource cannot be found.

  Radius Version Affected:  20.06 Description:   ...

• Shibboleth SP-Init Links in Word Docs don't open

  Version Affected:  All Description:   Shibbolet...

• Oauth error codes

  Version Affected:  All Description:   This arti...

• WindowsSSO realm - Failed to decrypt using provider 'RsaProtectedConfigurationProvider'

  Version Affected:  All Description:   One of th...

• How to enable or disable audit, debug, error and Syslog logging on multiple realms using Set-SALogging

  Version Affected:  All Description:   How to us...

• Change FileSync Service Account Name and Password

  File Sync Version Affected:  Verified with File...

• WSFed error: The expiration time is before or equal to the creation time.

  Version Affected:  9.0.2, 9.1, 9.2 Description:...

• How to use OIDC EndSession Endpoint

  Version Affected:  All Description:   The OIDCE...

• Linux SSH prompting for Password twice

  Version Affected:  All Description:   After fol...

• How to restore the correct case for Realm folders and IIS Apps

  Version Affected:  All Description:   How to re...

• SecureAuth API OTP validation throttling appears to be ignored

  Version Affected:  All Description:   When send...

• SecureAuth API returns "found_with_id_mismatch" for fingerprints

  Version Affected:  IdP 8.2 and higher Descripti...

• How to enable Debug logging for Filesync

  Version Affected: FileSync v4.0 and higher Desc...

• Which Oauth/OpenID flows work with the transformation engine

  Version Affected:  All Description:   The artic...

• AWS Cognito giving 503 Error intermittently

  Version Affected:  All Description:   AWS is re...

• Protect WindowsSSO realms from external visitors to hide privileged information

  Version Affected:  All Description:   If Window...

• SAAG has multiple outgoing connections using port 873

  Version Affected:  All versions of SAAG Descrip...

• Renew persistent token not working when using DFP as a token

  Version Affected:  All Description:   When usin...

• Mac Outlook Client not working after SameSite fix.

  Version Affected:  All Description:   After ins...

• Saml Consumer not accepting assertion

  Version Affected:  9.x Description:   The Secur...

• How to clear old logs from the SQL Reporting Database

  Version Affected:  All Description:   By defaul...

• Authentication API returns a 404 for usernames containing a + symbol

  Version Affected:  All Description:   When the ...

• Windows SSO realm bypassing Group Check

  Version Affected:  All Description:   A group r...

• How to: KnowBe4 Saml Integration

  Version Affected:  All Description:   This is a...

• How to use the Transformation Engine to correctly Base64 encode the ObjectGUID

  Version Affected:  All Description:   How to us...

• OTPs delivered via SMS appear to originate from multiple different phone numbers

  Version Affected:  All Description:   When end ...

• mS-DS-ConsistencyGuid attribute support

  Version Affected:  All Description:   Which ver...

• SAML consumer VAM missing cookie and Looping

  Version Affected:  All Description:   SAML Cons...

• .Net Saml Consumer VAM - SP Initiated

  Version Affected:  All Description:   The .Net ...

• How to disable Debug text logging on all realms

  Version Affected:  All Description:   How to di...

• BrainSpace SAML integration

  Version Affected:  9.x Description:   Trying to...

• Regular Expressions for ITU E.123 and E.164 phone number formats

  Version Affected:  All Description:   How to wr...

• Error: at ComponentSpace.SAML2.Utility.XmlSignature.Generate

  Version Affected:  All Description:   The follo...

• SecureAuth API returns "Could not resolve fingerprint with ID"

  Version Affected:  IdP 8.2 and higher Descripti...

• Decrypt Web config page fails with error Object reference not set to an instance of an object

  Version Affected:  9.x Description:   When clic...

• How to increase timeout for Link to Accept

  Version Affected:  IdP 9.1+ Description:   When...

• Webservice realm stops working if Lookup realm is set to use WinSSO

  Version Affected: All Description:   When a loo...

• How to change the response IIS sends when errors occur

  Version Affected: All Description:   How to cha...

• How to change the background image of individual pages in IdP

  Version Affected:  All Description:   How to ch...

• Error: HomogenizingCryptoServiceWrapper HomogenizeErrors

  Version Affected:  All Description:   Transpare...

• Forms POST begin site Error: Object reference not set to an instance of an object

  Version Affected:  IdP 8.2 - 19.07.01 Descripti...

• How to configure and test a Form Post Begin Site

  Version Affected: All Description:   How to con...

• Chrome is autofilling fields in IdP forms

  Version Affected:  All Description:   Chrome is...

• How to find out the authentication/MFA method used during login

  Version Affected:  All Description:   How to fi...

• Yubikey Enrollment and validation fails

  Version Affected: 9.1 9.2 9.3 19.07 Description...

• How to change the text shown to end users when authenticating via RADIUS

  Version Affected:  RADIUS 2.x and higher Descri...

• SecureAuth RADIUS logs are not showing the VPN clients IP address

  Version Affected:  All Description:   When usin...

• How are Device Recognition(DFP) scores calculated?

  Version Affected:  9.1 and Higher Description: ...

• Login for Windows - Error parsing and validating configuration file

  Version Affected:  L4W 19.06 and higher Descrip...

• Internet Explorer not working with Device/Browser Fingerprinting

  Version Affected:  9.2 - 19.07 Description:   I...

• Error: Hashed or Encrypted passwords are not supported with auto-generated keys

  Version Affected:  8.0-19.07 Description:   Whe...

• The New Experience Admin Console opens a blank white page: Bad Gateway

  SecureAuth IdP Version Affected:  9.3,19.07 Des...

• Arculix Radius configuration change not applying

  Version Affected:  Arculix Radius Description: ...

• Arculix Radius Server Logs

  Version Affected:  Arculix Radius Description: ...

• Arculix Error "An error occurred while communicating with the authentication server"

  Version Affected:  Arculix Description:   When ...

• How To Create An Air-Gapped Appliance

  Version Affected:  All version below 20.06 can ...