Configure SAML on Alteryx Server for Okta

[ashwiniraju06]

We are in the process of doing the Alteryx server upgrade to version 2022.3.1 and switching the authentication from IWA to SAML. We are trying to update the SAML authentication details under Alteryx system settings and failing to verify IDP with below error and gallery is not accessible.  Tried Uninstalling and re installing the server but no luck . Server is SSL enabled and working with IWA auth but failing to configure SAML.

Any help would be appreciated . 

[fmvizcaino]

Hi @ashwiniraju06 ,

You have probably followed the Okta tutorial, but I highly suggest checking again, especially the attribute statements. You can`t have anything else there and it is case sensitive. Step 7

https://community.alteryx.com/t5/Alteryx-Server-Knowledge-Base/Configuring-SAML-on-Alteryx-Server-fo...

This KB walks you through a possible issue. If I`m not mistaken, most of the cases are related to the server not having access to the IdP

https://community.alteryx.com/t5/Alteryx-Server-Knowledge-Base/Alteryx-Server-Issues-verifying-IDP-o...

You also have SAML logs being generated, maybe that could help you understand what is going on. I`m not 100% sure but I believe the logs have different names and perhaps location depending on the version. Here is the location for 23.1. https://help.alteryx.com/20231/server/configure-and-use-server-logs

Best,

FErnando Vizcaino

[ashwiniraju06]

No Luck with the KB article . we have added the gallery url as trusted site. 

[fmvizcaino]

Hey @ashwiniraju06 ,

Check if you can access the IdP URL from inside the Alteryx Server machine. Check if you receive anything back when putting the IdP URL and metadata on a internet browser.

It is usually a network problem blocking the connection between both.

I forgot to mention something very important. Changing the authentication method is not supported and will lead to issues in your MongoDB database. The way mongodb manages users with active directory and SAML are totally different and your server will not function properly. 

Best,

Fernando Vizcaino