topic Re: SAML Change port in Integration, Extension & APIs

SAML Change port

Martin22 — Fri, 05 Nov 2021 15:15:43 GMT

Hi,

I'm trying to implement SAML on our Qlik Sense platform (I made another post, on another problem we had with the certificate), and we have reached a point where we are getting the following error :

Error 400 - Bad request Contact your system administrator. The user cannot be authenticated by the SAML response through the following virtual proxy

I saw there was a post on this : https://community.qlik.com/t5/Knowledge/Error-400-Bad-request-Contact-your-system-administrator-The-user/ta-p/1713070 and it seems my problem comes indeed from the port, since I can see the 443 port in the metadata.

My question is : if the solution is to change the port from 443 to 1443, do we have to change it only in the metadata file, or do we have to also make the change somewhere in the QMC ? At the "Service listen port HTTPS (default)" of the central proxy, or in the URI to use in the virtual proxy for example ?

Regards,

Martin.

Re: SAML Change port

Damien_V — Fri, 05 Nov 2021 15:02:11 GMT

Hi,

That is only one of the many possible scenario where error 400 can happen (this is a generic error)
You would need to check the Qlik Proxy logs for the same timestamp to know what happened.

https://community.qlik.com/t5/Knowledge/Qlik-Sense-Information-needed-to-Troubleshoot-SAML-SSO-related/ta-p/1710333

https://community.qlik.com/t5/Techspert-Talks/STT-Integrating-SAML-with-Qlik-Sense-Enterprise/td-p/1626150

Re: SAML Change port

Martin22 — Fri, 05 Nov 2021 15:25:05 GMT

Hi,

Thank you for your answer.

I did check the logs, and there is an error message : SAML GET request invalid format 0

I didn't get a lot of information on it however, while the Error 400 post seemed to correspond, since I had the 443 port in the metadata. But it seems curious that we would change the extracted metadata without changing the platform it comes from, hence my question.

Is there any specific change to make regarding the error in the logs ?

Regards,

Martin.

Re: SAML Change port

Damien_V — Fri, 05 Nov 2021 15:48:48 GMT

Please check this article

https://community.qlik.com/t5/Archived-Technical-Documents/Qlik-Sense-SAML-GET-request-invalid-format/ta-p/1714217

Best regards,

Re: SAML Change port

Martin22 — Fri, 05 Nov 2021 15:55:18 GMT

Thank you for the link,

The problem is I already tried it when first I saw the error in the logs, but I get redirected to an "Access Denied" page, with the message :

The content you are looking for has been archived or you may not have permission to this area. For assistance, private message @Sue_Macaluso or @Jamie_Gregory

Is there another support page on this subject ?

Re: SAML Change port

Sue_Macaluso — Fri, 05 Nov 2021 15:59:28 GMT

@Martin22 That document link is archived and why you cannot reach it. @Damien_V Do you have a new link to that information? or was it meant to come out of the archive?

Sue

Re: SAML Change port

Damien_V — Fri, 05 Nov 2021 16:09:58 GMT

@Sue_Macaluso This shouldn't have been archived, that is still very valid for the current Qlik Sense versions.

Re: SAML Change port

Sonja_Bauernfeind — Mon, 08 Nov 2021 08:31:48 GMT

Hello @Martin22

The article was pulled out of the archive. Thank you, @Damien_V, for reviewing it and clearing it!

Re: SAML Change port

Martin22 — Fri, 12 Nov 2021 13:58:45 GMT

Hi,

It took us some time, but we finally succeeded in implementing SAML on our platform.

Thank you for your help, your responsiveness helped a lot.

Regards,

Martin.