Skip to main content
Question

SSO oidc/saml loop with MsEdge or Firefox - centreon 23.04

  • September 4, 2023
  • 7 replies
  • 203 views

Forum|alt.badge.img+3

Hello,

I configured oidc with AzureAD bu i’m facing a strange behavior, depending on the browser I use:

 

Google Chrome: OK in normal mode, OK in private mode

Edge: KO in normal mode, OK in private mode

Firefox: KO in normal mode, KO in private mode

 

What I mean for KO is the following beahvior:

After clicking on “Se connecter avec openid” button, connection is made, user/role is logged like this:

 

but in browser, I am redirected to the login page.

 

I tried to activate debug logs and I found a difference in centreon-web.log between “working” and “not-working” cases.

 

  1. working case (Google Chrome)

 

  1. NOT working case (Mozilla Firefox)

 

Test have been made using a brand new vmware install of centreon updated to v 23.04.7

 

7 replies

lpinsivy
Centreonian
Forum|alt.badge.img+21
  • Centreonian
  • September 4, 2023

Hi @samaga777 your browsers are managed by your company for the settings?


Forum|alt.badge.img+3
  • Author
  • Steward *
  • September 4, 2023

Hello @Laurent 

Hi @samaga777 your browsers are managed by your company for the settings?

Yes, some settings are managed by the company. I have increased user rights, so maybe I’m able to bypass some of them if needed.

 


lpinsivy
Centreonian
Forum|alt.badge.img+21
  • Centreonian
  • September 4, 2023

You need to check if cookie are created


Forum|alt.badge.img+3
  • Author
  • Steward *
  • September 5, 2023

This what i found:

 

CHROME

 

EDGE

 

 

 


lpinsivy
Centreonian
Forum|alt.badge.img+21
  • Centreonian
  • September 5, 2023

Hi @samaga777 you should have a PHPSESSID once connected to Centreon UI

 


Forum|alt.badge.img+3
  • Author
  • Steward *
  • September 5, 2023

I have it even if the login does not work

 

 

I will check with Azure Cloud manager if there is any restriction/policy that prevents the connection


lpinsivy
Centreonian
Forum|alt.badge.img+21
  • Centreonian
  • September 5, 2023

We made test with Azure ADFS with success