Delinea Shorts - How to Troubleshoot SAML Issues in Secret Server

SAML. Troubleshooting. Explained.

A good reminder on this: make sure if you have a “break glass” account for when SAML is broken or you can’t authenticate via AD, that you have also configured that account with the Bypass SAML permission.

That’s some good info there.

I wish I knew this was available when we rolled out SSO

Finally we have the news here about SAML

very true. some things take time.

Can’t stress enough the need for a “break glass” account.

Good info since I am about to launch SAML for our Secret Server and Platform.

The only problem I have had with SAML in Secret Server is miss matched UPN’s easy enough to resolve.

Good and nice information

Everything about SAML in Secret Server that I did know I needed to know but do now.

Thank you for the video, very informative

Very helpful experiencing issue with it at the moment! Has any of this changed with the upgraded to 11.7

I’m so glad to see a vendor giving real info on setting up SAML. As a ADFS admin, it’s terrible to see so many half baked attempts to do it.

SAML. Troubleshooting. Explained.

SAML. Troubleshooting. Explained.

Good info, we are dealing with these issues or similar now.

Good that we don’t have such issues.

Using EntraID. No issues here.

When we enable SAML, it immediately goes to the ADFS logon page - we now have domain authentication working fine. But what if we have a local user in Secret Server that needs to authenticate too? Like our global administrator account or potentially web services accounts. 

Should we have to use this to logon to our local admin account? What about 

/login.aspx?preventautologin=true

From:

https://docs.delinea.com/online-help/secret-server/authentication/saml/configuring-saml-sso/index.htm