Workspace 2.1 - Incorrect issuer in SAML AuthnRequest.

[JumpyJW]

Hi,

Just wondering if anyone knows how I can overcome this problem.

After the initial configuration on Workspace 2.1, I'm getting the following error when I access the main workspace page. I don't even get a chance to get prompted for logon name etc.

Error

Incorrect issuer in SAML AuthnRequest.

I can get to the following URL fine

https://workspacefqdn:8443

I can also get to the Appliance Configurator and Connector services Admin page fine.

[RaviChayanam]

What is your workspace appliance hostname. You can find it by looking at your /etc/hosts file or by running the hostname command. Also when you go to https://workspacefqdn:8443/ you should be redirected to https://workspacefqdn:8443/cfg/shortcuts and there should be a link for "Workspace Admin Console" can you click on that and see if that works?

[JumpyJW]

I checked the hostname in /etc/hosts and it's correct.

I can access https://workspacefqdn:8443/ fine and it does redirect me to https://workspacefqdn:8443/cfg/shortcuts. As I mentioned in my original post, I can access all the links except for "Workspace Admin Console" which will throw the error "Incorrect issuer in SAML AuthnRequest"

[RaviChayanam]

Hello

Is the hostname set to workspacefqdn?

Can you try two more things please

1. Try to go to https://workspacefqdn/SAAS/login/0 and login as admin/<admin password you set> - this is the same password you use to login to Appliance Configurator and Connector Admin

2. Login to Connector Admin at https://workspacefqdn:8443/hc/admin/ and you will land on "About" tab. If not, please go to "About" tab. Find the line that says "The workspace server is" and you will see a URL there. Is that https://workspacefqdn or is that different?

[JumpyJW]

1. https://workspacefqdn/SAAS/login/0 - This works and I can login using admin/<adminpassword>

2. https://workspacefqdn:8443/hc/admin/ - This works and I can confirm the <workspacefqdn> is correct.

[RaviChayanam · Accepted solution]

When you run the hostname command on the console as root, does it return the shortname like myhostname or does it return fqdn like myhostname.mydomain? It is supposed to return myhostname.mydomain and not myhostname. If it returns myhostname, please change the hostname to myhostname.mydomain by running yast.

[JumpyJW]

It returns <hostname>.<domainname> correctly and identical to <workspacefqdn>.

[JumpyJW]

Hi Ravi

Thanks for your support. I noticed my hostnames were in UPPERCASE so I ran 'yast' and updated them all to lowercase and rebooted the appliance.

After the reboot, I am able to login and not getting the SAML AuthnRequest error anymore! Probably good feedback to the development team to not allow UPPERCASE to avoid such trivial problem.

[aaronb123]

This was my exact issue. Uppercase letters in my hostname but was typing all lower case in browser. However, the error still occurred when I used the IP directly.

I made the change to all lowercase with yast and rebooted and was about to login!

Thanks guys

[ChrisBCarlson]

and FYI if you dont know what YAST is do this to change you're hostname to lowercase:

open console window

Login as root

type "yast"

navigate to "network services>hostnames" hit enter

use alt + the highlighted letter to select the option for example

alt+e will edit the ip addresses