Application Login Issue

Hello,

I am facing issue with application login. So, here is the scenario we have 2 production Ignition servers which is on AWS and share load using load balancers. We have setup IDP as Azure Active directory and when we try to login to application it goes to azure page, users put their credentials and then it comes back to Ignition page from where user sign in.

The problem is sometimes users are not able to login even when they enter correct credentials and when they try 2nd time it logged them in. So, why it was failing in first attempt.
We are receiving access token from azure in 1st attempt only and we have done test login using IDP also which also having similar issue.

We are getting error in logs as you can see in below. Please suggest something as we are unable to trace the issue.


I experienced the same issue a while back when attempting a switch away from AD (Internal w/ AD User Source) over to OIDC IdP. I always assumed it was a firewall / routing issue, and that I could kick the can down the road...which I was able to do.

I'm being asked to experiment with OIDC again (SSO, biometric capabilities, etc.) and receiving this same error - only on the first login attempt in recent history. Any successive login (from ANY client attempt within several minutes of the first) works fine. Now it seems I need to dig deeper. @Sourabh_Ambildhuke, any chance you found a solution to your problem?