SSO Debugging

Question

We have SSO configured on our Live and Test Brightspace instances, usually without any problems but very occasionally some people report that they get the "There was a problem processing your authentication". These users all have active Brightspace accounts.

I am assuming that the issue is that ADFS is sending the SAML Response containing a username that Brightspace does not recognise, but I have no way of confirming this. Is there any way that we can tell what username Brightspace is receiving from ADFS?

I did try enabling SAML logging but when I changed my user account and attempted to login via SSO again I got the "there was a problem" message but nothing was logged in the System Log.

Thanks

Neil

Shobhit.S.365 · Answer

Hi @Mariana.R.106,

Thank you for reaching out to the Brightspace Community.

Based on your description that some users are facing issues with SAML login, it would be helpful to create a support case with the details of the error encountered and affected users so we can investigate further.

Here's a Brightspace article that might be helpful for the workflow you're trying to achieve:

https://community.d2l.com/brightspace/kb/articles/4843-saml-administration-overview

We look forward to hearing from you through the support case.

Kind regards,

Shobhit Sachdeva

Mariana.R.106 · Answer

Hi @Neil.B.70,

Did you fin the solution? I am with the same problem, but only with some users.

Thank you,

Mariana

Mohamed.F.137 · Answer

Hi Neil,

Have you tried using a browser extension with a SAML tracer. I have used this in the past to get info that does not reach BrightSpace.  It should show all the actions and give you an indication of what exactly is being sent over to BrightSpace.