The ConnectWise Control forum has moved to ConnectWise University! This forum has been locked and is in read-only mode. Click here for instructions on how to access the new forum.

Welcome Guest! You can not login or register.



Go to last post Go to first unread
#1 Posted : Monday, August 6, 2018 10:15:53 PM(UTC)

Rank: Guest

Joined: 8/6/2018(UTC)
Posts: 1
United States
Location: Minneapolis

Thanks: 1 times
I have followed the documentation and setup other SAML integration into OKTA without issue. When I go through the documentation and setup the integration with ConnectWise I am getting the following error.

Error processing external login return: Bad signature of SAML response

I called support and they said it was a bug with CONTROL SSL sites but I don't see anything on there site and Azure / Onelogin appear not to have the same issues.

Has anyone been able to get OKTA SSO working with ConnectWise since the release of 6.6? I was told I need to wait til the release of 6.7 to get this issue resolved???

#2 Posted : Wednesday, August 8, 2018 12:42:11 PM(UTC)

Rank: Administration

Medals: Level 4: Wise Old Owl! Received 100 Thanks!

Joined: 3/28/2014(UTC)
Posts: 2,862
United States

Thanks: 3 times
Was thanked: 351 time(s) in 303 post(s)
To briefly summarize the bug, it's failing to check the hash (DigestValue) of the Assertion. The Assertion's canonicalized XML used for hashing is including the Signature element, where it should exclude it. We introduced this bug in a revision of 6.6 while attempting to fix another SAML-related issue.

This bug has been fixed in 6.7 and while it is still a pre-release, it's likely to be released as stable very soon. While I cannot say exactly, most likely within a week or two.
ScreenConnect Team
thanks 1 user thanked Scott for this useful post.
everl0ng on 8/8/2018(UTC)
Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.