Issue with SAML Configurations

Question

Dear All

I installed the Alteryx Server（2022.1）on an Azure VM and doing SAML Authentication.

When I click on Verify IDP I am getting Failed to start Authentication service. Check your settings and try again error.

We followed the instructions on this webpage for Azure configuration.

https://community.alteryx.com/t5/Alteryx-Server-Knowledge-Base/Configuring-SAML-2-0-on-Alteryx-Server-for-Azure-AD/ta-p/588828

And installed the certificate on the server.

In addition, this VM can only connect to the company's internal LAN and is not yet connected to the internet.

What are possible reasons for this error to occur?

Thank you in advance.

Ariharan · Accepted Answer

Hi @Qiu ,

Can you please update Default gallery administrator details and give a try once.?

Regards,

Ariharan R

ArtApa · Accepted Answer

Hi @Qiu - We only support the AD that is present where the server is installed. then your local AD needs to trust both ways your AD Azure. It needs to be the same forest. Chances are your issue because of the different forest.

fmvizcaino · Accepted Answer

Hey @Qiu ,

The most common reason is your Alteryx Server box not being able to access the IdP due to no internet connection.

When you click in the verify IdP button, you are redirected to the IdP URL to put your login information and that should be accessible from the server box.

More about SAML interaction: https://community.alteryx.com/t5/Engine-Works/Alteryx-Architectures-SAML-SSO-Authentication/ba-p/895056

KB when you have internet but IdP is not accessible yet: https://community.alteryx.com/t5/Alteryx-Server-Knowledge-Base/Alteryx-Server-Issues-verifying-IDP-on-a-SAML-implementation/ta-p/623658

If after all of these, you get a blank page instead of the login page, try this: https://community.alteryx.com/t5/Alteryx-Server-Knowledge-Base/Troubleshooting-Blank-Screen-when-Configuring-SAML/ta-p/501721

If none of these works, maybe your problem is with your SSL certificate. Try moving to built-in auth and check if the service is starting.

Feel free to reach out directly to me on whatsapp or linkedin if you need help troubleshooting this.

Best,

Fernando Vizcaino