Cannot Authen SAML with Azure AD with WGCS

[Piyapon]

Customer organization will use WGCS and authenticate with Azure AD SAML. They don't have ADFS on prem. 

I tried to follow this step (https://community.mcafee.com/t5/Enterprise-Documents/Web-Gateway-Cloud-Service-Configuring-SAML-Auth...)

After completed all step, It redirects to log in page but after type e-mail address, it come back to log in page again. Anyone has ever faced this issue.

Thanks 

[Niks]

Hi @Piyapon ,

In the browser exceptions need to add the ADFS domain, this will allow the browser to communicate directly to the identity provider. If you are using Azure Active Directory you can use the below list in a browser exception

*microsoftonline.com
*msftauth.net
*msauth.net
*msauthimages.net
static-exp1.licdn.com

Suggest you use the developer tool to check if URL related to IDP are making a direct connection or redirecting to WGCS.

Regards,

Nikhil

[Piyapon]

Thank you Niks for fast response but It still doesn't work. It keeps getting pop up on authentication page. Any additional config I may missed

[Piyapon]

@Niks  I cannot attach files in private message. I followed your instruction and generate 2 files here

[Niks]

Hi @Piyapon ,

Which port are you using for in browser settings?  Browser settings should be configured redirect to port 8084 port.

https://community.mcafee.com/t5/Enterprise-Documents/Web-Gateway-Cloud-Service-Configuring-SAML-Auth...

From HAR file noticed browser is redirecting to port 80

Request URL: https://saml.saasprotection.com/mwg-internal/de5fs23hu73ds/plugin?target=Auth&reason=Auth&setCookie=...

Request Method: GET
Status Code: 403 LoginPageSaaS

Remote Address: 185.221.69.144:80

Regards,

Nikhil

[Piyapon · Accepted solution]

Dear @Niks 

I have set it to port 8084. Just in case it might be cached in browser. I reproduce issue again and this time I have already clear browser cache and close browser before reproduce har file. Please see it might help you to investigate.

Proxy: http://c1198155036.saasprotection.com
port: 8084
Exception list: *lala-it.com;*microsoftonline.com;*msftauth.net;*msauth.net;*msauthimages.net;static-exp1.licdn.com
Test URL : Office.com