Alteryx Server Discussions

Find answers, ask questions, and share expertise about Alteryx Server.
It's the most wonderful time of the year - Santalytics 2020 is here! This year, Santa's workshop needs the help of the Alteryx Community to help get back on track, so head over to the Group Hub for all the info to get started!

Issue with SAML Configurations (Failed to start Authentication service)

Highlighted
6 - Meteoroid

Hey All,

 

Issue:

I am doing SAML Authentication for our Alteryx Server and filled in the required fields and when I click on Verify IDP I am getting Failed to start Authentication service. Check your settings and try again error on the bottom edge of the configuration screen. What are possible reasons for this error to occur?

 

Notes:

  • Our Alteryx Server was stood up with Integrated Windows Authentication. We trying to get it switched over to SAML authentication.
  • We have verified IDP URL, IDP SSO URL, and X509 certificate to be valid.
  • ACS Base URL is something we are not sure. Since our base address is https://x.x.com/gallery, we have the ACS Base URL to be https://x.x.com/gallery 
  • Alteryx Version: AlteryxServer_x64_2019.2.7.63499

 

authentication-service-issue.PNG

Highlighted
Alteryx
Alteryx

@KennyD 

 

Do you have the below lines in the certificate box? If so, try to remove these.

 

-----BEGIN CERTIFICATE----- 

AND

-----END CERTIFICATE-----

 

Also, please make sure that you remove the new lines so all the characters are in a single line.

Highlighted
6 - Meteoroid

@MichalM 

 

Yes, both the begin and end lines were removed. I also made sure to copy and paste the certificate string into notepad first. Then I copied that over to the x509 certificate field box. I get the Failed to start Authentication service error.

 

 

Highlighted
Alteryx
Alteryx

Just a thought, can you ping the IDP from the server successfully? I'm wondering whether there could be a firewall blocking the communication?

Highlighted
Alteryx Certified Partner

Hi @KennyD ,

 

I think the problem might be that you've already spun up the config and created the MongoDB with Windows authentication. I believe you have to delete the DB and re-build when you change authentication.

You can find the location of the MongoDB in the persistence setup section of the config.

 

Cheers,

 

M.