topic Re: SAML connection error with PingID in Cortex XSOAR Discussions

SAML connection error with PingID

joshuajohnsonco — Wed, 14 Jun 2023 17:59:31 GMT

Been fighting an integration issue for awhile now. Was hoping someone had seen this error before.

Could not init SAML instance, IDPSSOURL: 'https://pid-dev.domain.com/site/SignOn.saml' is not available.

I was told by the tech who working on PingID the url is valid.
Any thoughts on how to troubleshoot this?

Re: SAML connection error with PingID

MBeauchamp2 — Wed, 14 Jun 2023 18:55:30 GMT

That's from the test button? It just means the XSOAR server can't hit that URL, which for SAML doesn't matter since it all happens in the Users Browser.

Basically if you think you have things configured correctly, the test is to try and login!

There is a how-to video on SAML here, doesn't cover Ping but the concepts are all the same: https://live.paloaltonetworks.com/t5/cortex-xsoar-how-to-videos/cortex-xsoar-video-how-to-setup-saml-authentication/ta-p/387444

Re: SAML connection error with PingID

joshuajohnsonco — Thu, 29 Jun 2023 14:49:42 GMT

Thank you for the comment, but that didn't work. The instance wasn't working due to an incorrect config/ping URL. Once we got the right setting in place, the test button did start working.

Re: SAML connection error with PingID

MBeauchamp2 — Thu, 29 Jun 2023 14:58:35 GMT

Honestly, the test is can you login since SAML is all in browser, and depends on your Identity Provider. For example the test button on that will usually never work with Azure AD.

The real test is can you login securely with the attributes mapped properly (FirstName, LastName, Email, UserName, Phone) and are your groups mapped properly to your XSOAR Roles.

For reference for anyone else reviewing this thread.