Qlik Cloud - Configuring Okta as a SAML identity provider

[agigliotti]

Hello,
After successfully recovered the tenant access using the URL: https://tenant-url/login/recover , I'm struggling to add a new Okta SAML IdP on Qlik Cloud.
I just followed the guide at https://help.qlik.com/en-US/cloud-services/Subsystems/Hub/Content/Sense_Hub/Admin/configuring-idp-ok...

but at the end after Okta authentication to validate the IdP, I get landed in the Okta Admin Console web page rather than be presented with the options to promote the user to a Qlik Cloud tenant admin and to activate the IdP.

Currently the new IdP created is still in "Validation pending" state and I'm not able to validate it and get it activated and the actual Qlik Cloud authentication is with the default Qlik account.

Trying to click on the Okta app for accessing Qlik cloud i get the message below:

{"errors":[{"title":"Invalid authentication callback","detail":"Active IDP is not a SAML IDP","code":"AUTH-2","status":"400"}],"traceId":"63aa8f7d280d3d7d4c02ac20b163086d"}

Could anyone help me to fix it? @Albert_Candelario @Levi_Turner @Daniele_Purrone @Damien_V @Maria_Halley @Bastien_Laugiero @Sebastian_Linser @ToniKautto 

Many thanks in advance for your time.

Best Regards

[Daniele_Purrone]

Ciao @agigliotti ,

the error message is suspicious. Have you checked with Okta's support as well?

[agigliotti]

Ciao @Daniele_Purrone ,

Since using Okta with QSEoW is working fine, I think there is something wrong in Qlik SaaS.
Okta support said the user is logged successfully on their side.

Could the recover login be the cause of such strange behavior?

I remember that before using it Okta worked fine.

How can I troubleshooting it?

[agigliotti · Accepted solution]

Just to inform that I moved to Okta by OIDC and it worked well in both on premise and cloud deployments.

Best Regards

[Daniele_Purrone]

Glad it's solved!