KB441359: MicroStrategy Library login page loops indefinitely after enabling SAML authentiation using Distinguished Names for user groups

Principal Product Specialist • Strategy

This knowledge base article describes a known issue with MicroStrategy Library 10.11. After enabling SAML authentication using distinguished names for user groups, the Library login page refreshes indefinitely and does not allow the user to authenticate with SAML. Furthermore, this article outlines the steps to prevent this issue in MicroStrategy Library 10.11.

DESCRIPTION
After enabling SAML authentication in Strategy Library, the login page does not show SAML as authentication mode but prompts the user to provide standard authentication credentials instead. In addition, the login page is refreshed indefinitely in a loop.
CAUSE
This issue is caused by a known issue when using distinguished names for SAML group membership as seen in mstrSAMLconfig.xml (StrategyLibrary/WEB-INF/classes/auth/SAML/):

ACTION
This issue has been addressed in Strategy Library 11.0. Please upgrade to take advantage of the fix.
WORKAROUND
1. Locate

restful-api-1.0-SNAPSHOT-jar-with-dependencies.jar

in the

WEB-INF/lib

of the Strategy Library file directory.
2. Find

SAMLConfig.xml

auth/

inside the jar.
3. Copy the file and place it in

WEB-INF/classes/auth/

. Now any modification of the file will take precedence over the original file inside the jar.
4. Edit

SAMLConfig.xml

WEB-INF/classes/auth/

.
5. Modify the following lines:
a. Replace


<property name="groupParser" ref="samlGroupParser" />

with


<property name="groupParser" ref="sanlGroupParser" />

b. Replace


<bean id="samlGroupParser" class="com.Strategy.auth.sso.SSOSimpleGroupParser"/>

with


<bean id="sanlGroupParser" class="com.Strategy.auth.sso.SSOSimpleGroupParser"/>

6. Save SAMLconfig.xml
7. Restart the application server
This article has ID KB441359.

Comment

0 comments

Details

Knowledge Article

Published:

July 6, 2018

Last Updated:

November 29, 2018