SAML Assertion Login Fail

[niket345 (Niket Telavane)]

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

Hello Experts,

I need help for SAML SSO Login. I have noticed that if I enter wrong credentials then it is redirected to IIQ Login page.

Its is working fine with the correct authentication. generally it should not be redirect to IIQ login page after Auth Failure.

Please suggest, Is this IIQ issue or PingID issue.

[kjakubiak (Kamil Jakubiak)]

Hi Niket,
This is standard and out of the box behavour of Identity IQ. The easiest way is to modify login webpage if you don’t want to allow users to log in with username and password.

In this post

How to Configure SSO for Inactive Users to redirect forbidden page

Honestly I don’t know if you can configure different redirection in this case but what I believe would be possible: if you take a look on $TOMCAT_HOME/webapps/identityiq/ui/loginInclude.xhtml file - this is the page which is displayed after not successfull try of SAML authentication (when no identity is returned). You can see some of blocks are conditional - so I would try to create conditional block that will display in this case. (for example based on some session variable you can set during…

you can find quite long discussion between me and @Remold how this requirement can be achieved.