SSO no longer working after 8.3.2 upgrade

Ignition
1

Hi,

me and my team have started upgrading to 8.3.2 from 8.1.47. We have used SSO to enable easy logins for the operators. We know it has been deprecated for a while and have been using the insecuresso wrapper in the servers config file, and the SSO property in the project properties.

We use an IDP with AD connection and it has been working fine with SSO all this time. But when we made the update, we can no longer log in using SSO. The operators don’t have their own accounts but uses the windows username instead. The clients they use also have SSO so they don’t know the password.

Our backup is still running 8.1.47 since it is necessary for production to be able to use SSO and we run everything via that until we can solve this, unless it is no longer possible, in any way, to get it to work again.

Has something been changed with this in the new version and is it possible to get this to work?

Appreaciate all help on this matter!

Regards, Nick G.

2

It hasn't been intentionally disabled and would be expected to still work in 8.3.

The system property name was migrated to ignition.gateway.enableInsecureAdSso, but the 'legacy' key should still work (ignition.enableInsecureAdSso).

If you look in the gateway's logs for messages from the Authentication.SSOHelper logger, do you see a WARN level message indicating SSO is enabled?
If so, you can try setting that logger to DEBUG and logging in again, which logs some useful information that might help with troubleshooting.

3

Yes we did get the warning, we put on debug mode but still got nothing. And changing the wrapper did not change anything either, we got the same warning.

After some checking we noticed that in the settings of the user source, the SSO Enabled had been turned off after updating.

1 Like