Problems using SAML Authentication + Okta

delta · May 24, 2024, 8:49pm

Product: PowerShell Universal
Version: 4.2.21

I struggled to get SAML2 authentication working with this version until adding the -CorrelationCookieSameSite flag. Is this intended behavior or it is likely that I have some other configuration setup incorrectly?

Set-PSUAuthenticationMethod -Type "Saml2"  -CallbackPath "https://dashboardtest/" -MetadataAddress "https://identity.renhsc.com/app/exke20q460t1DmIkr697/sso/saml/metadata" -EntityId "https://dashboardtest/" -IdentityProviderEntityId "$(HTTP_PROVIDER_LINK)" -SingleSignOnServiceUrl "$(SSO_URL)" -CorrelationCookieSameSite "Secure"

Also the mac computers in the environment are not able to authenticate, which was the point of attempting to set this up.

Here’s a log snippet from when a mac user attempts to authenticate

2024-05-24 14:23:03.301 -04:00 [INF] Executed action UniversalAutomation.LoginPageController.Get (Universal.Server) in 0.7353ms
2024-05-24 14:23:03.301 -04:00 [INF] Executed endpoint 'UniversalAutomation.LoginPageController.Get (Universal.Server)'
2024-05-24 14:23:03.302 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/loginPage - - - 200 - application/json;+charset=utf-8 3.3083ms
2024-05-24 14:23:03.304 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/version - -
2024-05-24 14:23:03.304 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - -
2024-05-24 14:23:03.306 -04:00 [INF] Executing endpoint 'Universal.Server.Services.VersionController.Get (Universal.Server)'
2024-05-24 14:23:03.306 -04:00 [INF] Route matched with {action = "Get", controller = "Version"}. Executing controller action with signature Microsoft.AspNetCore.Mvc.IActionResult Get() on controller Universal.Server.Services.VersionController (Universal.Server).
2024-05-24 14:23:03.306 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-24 14:23:03.306 -04:00 [INF] Executing OkObjectResult, writing value of type 'System.String'.
2024-05-24 14:23:03.306 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-24 14:23:03.306 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-24 14:23:03.306 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-24 14:23:03.306 -04:00 [INF] Executed action Universal.Server.Services.VersionController.Get (Universal.Server) in 0.3145ms
2024-05-24 14:23:03.306 -04:00 [INF] Executed endpoint 'Universal.Server.Services.VersionController.Get (Universal.Server)'
2024-05-24 14:23:03.306 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/version - - - 200 - text/plain;+charset=utf-8 2.2327ms
2024-05-24 14:23:03.308 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-24 14:23:03.308 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-24 14:23:03.308 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-24 14:23:03.308 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-24 14:23:03.308 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - - - 401 0 - 3.8347ms
2024-05-24 14:23:03.387 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/alive - -
2024-05-24 14:23:03.387 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/sso - -
2024-05-24 14:23:03.387 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/version/build - -
2024-05-24 14:23:03.389 -04:00 [INF] Executing endpoint 'Universal.Server.Services.VersionController.GetBuildVersion (Universal.Server)'
2024-05-24 14:23:03.389 -04:00 [INF] Executing endpoint 'UniversalAutomation.AliveController.Get (Universal.Server)'
2024-05-24 14:23:03.389 -04:00 [INF] Route matched with {action = "GetBuildVersion", controller = "Version"}. Executing controller action with signature Microsoft.AspNetCore.Mvc.IActionResult GetBuildVersion() on controller Universal.Server.Services.VersionController (Universal.Server).
2024-05-24 14:23:03.389 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.AuthenticationController.SingleSignOn (Universal.Server)'
2024-05-24 14:23:03.389 -04:00 [INF] Route matched with {action = "Get", controller = "Alive"}. Executing controller action with signature Microsoft.AspNetCore.Mvc.IActionResult Get() on controller UniversalAutomation.AliveController (Universal.Server).
2024-05-24 14:23:03.389 -04:00 [INF] Executing OkObjectResult, writing value of type '<>f__AnonymousType20`1[[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-24 14:23:03.389 -04:00 [INF] Route matched with {action = "SingleSignOn", controller = "Authentication"}. Executing controller action with signature Microsoft.AspNetCore.Mvc.IActionResult SingleSignOn() on controller UniversalDashboard.Controllers.AuthenticationController (Universal.Server).
2024-05-24 14:23:03.389 -04:00 [INF] Executed action Universal.Server.Services.VersionController.GetBuildVersion (Universal.Server) in 0.3361ms
2024-05-24 14:23:03.389 -04:00 [INF] Executed endpoint 'Universal.Server.Services.VersionController.GetBuildVersion (Universal.Server)'
2024-05-24 14:23:03.389 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/version/build - - - 200 - application/json;+charset=utf-8 2.4248ms
2024-05-24 14:23:03.390 -04:00 [INF] Executing JsonResult, writing value of type '<>f__AnonymousType4`1[[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-24 14:23:03.390 -04:00 [INF] Executed action UniversalDashboard.Controllers.AuthenticationController.SingleSignOn (Universal.Server) in 0.7621ms
2024-05-24 14:23:03.390 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.AuthenticationController.SingleSignOn (Universal.Server)'
2024-05-24 14:23:03.390 -04:00 [INF] Executing OkObjectResult, writing value of type '<>f__AnonymousType1`6[[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-24 14:23:03.390 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/sso - - - 200 - application/json;+charset=utf-8 3.2416ms
2024-05-24 14:23:03.390 -04:00 [INF] Executed action UniversalAutomation.AliveController.Get (Universal.Server) in 1.1286ms
2024-05-24 14:23:03.390 -04:00 [INF] Executed endpoint 'UniversalAutomation.AliveController.Get (Universal.Server)'
2024-05-24 14:23:03.390 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/alive - - - 200 - application/json;+charset=utf-8 3.5209ms
2024-05-24 14:23:03.475 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/version/update - -
2024-05-24 14:23:03.477 -04:00 [INF] Executing endpoint 'Universal.Server.Services.VersionController.GetUpdate (Universal.Server)'
2024-05-24 14:23:03.477 -04:00 [INF] Route matched with {action = "GetUpdate", controller = "Version"}. Executing controller action with signature Microsoft.AspNetCore.Mvc.IActionResult GetUpdate() on controller Universal.Server.Services.VersionController (Universal.Server).
2024-05-24 14:23:03.477 -04:00 [INF] Executing JsonResult, writing value of type 'PowerShellUniversal.Update'.

delta · May 28, 2024, 3:24pm

Here’s some more log

2024-05-28 11:22:23.659 -04:00 [INF] Route matched with {action = "Index", controller = "UDDashboard"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] Index() on controller UniversalDashboard.Controllers.UDDashboardController (Universal.Server).
2024-05-28 11:22:23.660 -04:00 [INF] Executing endpoint 'UniversalAutomation.AliveController.Get (Universal.Server)'
2024-05-28 11:22:23.660 -04:00 [INF] Route matched with {action = "Get", controller = "Alive"}. Executing controller action with signature Microsoft.AspNetCore.Mvc.IActionResult Get() on controller UniversalAutomation.AliveController (Universal.Server).
2024-05-28 11:22:23.661 -04:00 [INF] Executing OkObjectResult, writing value of type '<>f__AnonymousType1`6[[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-28 11:22:23.661 -04:00 [INF] Executed action UniversalAutomation.AliveController.Get (Universal.Server) in 1.3189ms
2024-05-28 11:22:23.661 -04:00 [INF] Executed endpoint 'UniversalAutomation.AliveController.Get (Universal.Server)'
2024-05-28 11:22:23.661 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/v1/alive - - - 200 - application/json;+charset=utf-8 3.8317ms
2024-05-28 11:22:23.662 -04:00 [INF] Executing JsonResult, writing value of type '<>f__AnonymousType19`9[[System.Collections.Hashtable, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Guid, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Guid, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Collections.Generic.List`1[[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]], System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Nullable`1[[System.Int32, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]], System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-28 11:22:24.329 -04:00 [INF] Executed action UniversalDashboard.Controllers.UDDashboardController.Index (Universal.Server) in 669.9715ms
2024-05-28 11:22:24.329 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.UDDashboardController.Index (Universal.Server)'
2024-05-28 11:22:24.329 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/internal/dashboard - - - 200 - application/json;+charset=utf-8 672.3634ms
2024-05-28 11:22:24.330 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/api/v1/alive - -
2024-05-28 11:22:24.332 -04:00 [INF] Executing endpoint 'UniversalAutomation.AliveController.Get (Universal.Server)'
2024-05-28 11:22:24.332 -04:00 [INF] Route matched with {action = "Get", controller = "Alive"}. Executing controller action with signature Microsoft.AspNetCore.Mvc.IActionResult Get() on controller UniversalAutomation.AliveController (Universal.Server).
2024-05-28 11:22:24.333 -04:00 [INF] Executing OkObjectResult, writing value of type '<>f__AnonymousType1`6[[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-28 11:22:24.333 -04:00 [INF] Executed action UniversalAutomation.AliveController.Get (Universal.Server) in 1.2584ms
2024-05-28 11:22:24.333 -04:00 [INF] Executed endpoint 'UniversalAutomation.AliveController.Get (Universal.Server)'
2024-05-28 11:22:24.333 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/v1/alive - - - 200 - application/json;+charset=utf-8 3.7977ms
2024-05-28 11:22:24.334 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/api/internal/dashboard - -
2024-05-28 11:22:24.335 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.UDDashboardController.Index (Universal.Server)'
2024-05-28 11:22:24.335 -04:00 [INF] Route matched with {action = "Index", controller = "UDDashboard"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] Index() on controller UniversalDashboard.Controllers.UDDashboardController (Universal.Server).
2024-05-28 11:22:24.337 -04:00 [INF] Request starting HTTP/1.1 POST http://dashboardtest/dashboardhub/negotiate?dashboardid=1&pageid=002d6d1e-c513-483e-bf1a-fe8393752e01&sessionid=e23667b2-9efa-4f06-99e5-a95c9871d971&timezone=America/New_York&negotiateVersion=1 - 0
2024-05-28 11:22:24.337 -04:00 [INF] CORS policy execution failed.
2024-05-28 11:22:24.337 -04:00 [INF] Request origin https://dashboardtest does not have permission to access the resource.
2024-05-28 11:22:24.338 -04:00 [INF] Executing endpoint '/dashboardhub/negotiate'
2024-05-28 11:22:24.339 -04:00 [INF] Executed endpoint '/dashboardhub/negotiate'
2024-05-28 11:22:24.339 -04:00 [INF] Request finished HTTP/1.1 POST http://dashboardtest/dashboardhub/negotiate?dashboardid=1&pageid=002d6d1e-c513-483e-bf1a-fe8393752e01&sessionid=e23667b2-9efa-4f06-99e5-a95c9871d971&timezone=America/New_York&negotiateVersion=1 - 0 - 200 - application/json 2.0282ms
2024-05-28 11:22:24.341 -04:00 [INF] Executing JsonResult, writing value of type '<>f__AnonymousType19`9[[System.Collections.Hashtable, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Guid, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Guid, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Collections.Generic.List`1[[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]], System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Nullable`1[[System.Int32, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]], System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[System.Boolean, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-28 11:22:24.355 -04:00 [INF] Executed action UniversalDashboard.Controllers.UDDashboardController.Index (Universal.Server) in 19.116ms
2024-05-28 11:22:24.355 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.UDDashboardController.Index (Universal.Server)'
2024-05-28 11:22:24.355 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/internal/dashboard - - - 200 - application/json;+charset=utf-8 21.2092ms
2024-05-28 11:22:24.358 -04:00 [INF] Request starting HTTP/1.1 POST http://dashboardtest/dashboardhub/negotiate?dashboardid=1&pageid=795649e2-b039-49fe-8b84-6b54016473b6&sessionid=e23667b2-9efa-4f06-99e5-a95c9871d971&timezone=America/New_York&negotiateVersion=1 - 0
2024-05-28 11:22:24.358 -04:00 [INF] CORS policy execution failed.
2024-05-28 11:22:24.358 -04:00 [INF] Request origin https://dashboardtest does not have permission to access the resource.
2024-05-28 11:22:24.360 -04:00 [INF] Executing endpoint '/dashboardhub/negotiate'
2024-05-28 11:22:24.360 -04:00 [INF] Executed endpoint '/dashboardhub/negotiate'
2024-05-28 11:22:24.360 -04:00 [INF] Request finished HTTP/1.1 POST http://dashboardtest/dashboardhub/negotiate?dashboardid=1&pageid=795649e2-b039-49fe-8b84-6b54016473b6&sessionid=e23667b2-9efa-4f06-99e5-a95c9871d971&timezone=America/New_York&negotiateVersion=1 - 0 - 200 - application/json 2.5748ms
2024-05-28 11:22:24.364 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/dashboardhub?dashboardid=1&pageid=002d6d1e-c513-483e-bf1a-fe8393752e01&sessionid=e23667b2-9efa-4f06-99e5-a95c9871d971&timezone=America/New_York&id=zCrd6CpjRG7KtbGCkuw0ow - -
2024-05-28 11:22:24.364 -04:00 [INF] CORS policy execution failed.
2024-05-28 11:22:24.364 -04:00 [INF] Request origin https://dashboardtest does not have permission to access the resource.
2024-05-28 11:22:24.366 -04:00 [INF] Executing endpoint '/dashboardhub'
2024-05-28 11:22:24.383 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/api/internal/component/element/cba3bdc8-3866-4292-ac0d-75777e5738c2? - -
2024-05-28 11:22:24.385 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.UDComponentController.Element (Universal.Server)'
2024-05-28 11:22:24.385 -04:00 [INF] Route matched with {action = "Element", controller = "UDComponent"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] Element(System.String) on controller UniversalDashboard.Controllers.UDComponentController (Universal.Server).
2024-05-28 11:22:24.396 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/dashboardhub?dashboardid=1&pageid=795649e2-b039-49fe-8b84-6b54016473b6&sessionid=e23667b2-9efa-4f06-99e5-a95c9871d971&timezone=America/New_York&id=I4BZ_Ou-vCosw0ERHlhA1A - -
2024-05-28 11:22:24.397 -04:00 [INF] CORS policy execution failed.
2024-05-28 11:22:24.397 -04:00 [INF] Request origin https://dashboardtest does not have permission to access the resource.
2024-05-28 11:22:24.399 -04:00 [INF] Executing endpoint '/dashboardhub'
2024-05-28 11:22:24.410 -04:00 [INF] Executing ContentResult with HTTP Response ContentType of application/json
2024-05-28 11:22:24.410 -04:00 [INF] Executed action UniversalDashboard.Controllers.UDComponentController.Element (Universal.Server) in 25.1806ms
2024-05-28 11:22:24.410 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.UDComponentController.Element (Universal.Server)'
2024-05-28 11:22:24.410 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/internal/component/element/cba3bdc8-3866-4292-ac0d-75777e5738c2? - - - 200 - application/json 27.6055ms
2024-05-28 11:22:24.415 -04:00 [INF] Request starting HTTP/1.1 POST http://dashboardtest/api/internal/component/element/navcba3bdc8-3866-4292-ac0d-75777e5738c2 application/json 0
2024-05-28 11:22:24.415 -04:00 [INF] CORS policy execution failed.
2024-05-28 11:22:24.415 -04:00 [INF] Request origin https://dashboardtest does not have permission to access the resource.
2024-05-28 11:22:24.417 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.UDComponentController.ElementPost (Universal.Server)'
2024-05-28 11:22:24.417 -04:00 [INF] Route matched with {action = "ElementPost", controller = "UDComponent"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] ElementPost(System.String, Boolean) on controller UniversalDashboard.Controllers.UDComponentController (Universal.Server).
2024-05-28 11:22:24.425 -04:00 [INF] Executing ContentResult with HTTP Response ContentType of application/json
2024-05-28 11:22:24.425 -04:00 [INF] Executed action UniversalDashboard.Controllers.UDComponentController.ElementPost (Universal.Server) in 8.0855ms
2024-05-28 11:22:24.425 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.UDComponentController.ElementPost (Universal.Server)'
2024-05-28 11:22:24.425 -04:00 [INF] Request finished HTTP/1.1 POST http://dashboardtest/api/internal/component/element/navcba3bdc8-3866-4292-ac0d-75777e5738c2 application/json 0 - 200 - application/json 10.4015ms
2024-05-28 11:22:27.061 -04:00 [INF] Request starting HTTP/1.1 POST http://dashboardtest.ddmi.intra.renhsc.com/api/v1/signin?ReturnUrl=%2F application/json 55
2024-05-28 11:22:27.061 -04:00 [INF] CORS policy execution failed.
2024-05-28 11:22:27.061 -04:00 [INF] Request origin https://dashboardtest.ddmi.intra.renhsc.com does not have permission to access the resource.
2024-05-28 11:22:27.063 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.AuthenticationController.SignIn (Universal.Server)'
2024-05-28 11:22:27.063 -04:00 [INF] Route matched with {action = "SignIn", controller = "Authentication"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] SignIn(UniversalDashboard.Controllers.Credential) on controller UniversalDashboard.Controllers.AuthenticationController (Universal.Server).
2024-05-28 11:22:27.107 -04:00 [INF] Executing JsonResult, writing value of type '<>f__AnonymousType2`1[[System.String, System.Private.CoreLib, Version=7.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]'.
2024-05-28 11:22:27.107 -04:00 [INF] Executed action UniversalDashboard.Controllers.AuthenticationController.SignIn (Universal.Server) in 44.4125ms
2024-05-28 11:22:27.107 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.AuthenticationController.SignIn (Universal.Server)'
2024-05-28 11:22:27.108 -04:00 [INF] Request finished HTTP/1.1 POST http://dashboardtest.ddmi.intra.renhsc.com/api/v1/signin?ReturnUrl=%2F application/json 55 - 200 - application/json;+charset=utf-8 47.0625ms
2024-05-28 11:22:29.395 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/api/internal/session/e23667b2-9efa-4f06-99e5-a95c9871d971 - -
2024-05-28 11:22:29.398 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.SessionController.Index (Universal.Server)'
2024-05-28 11:22:29.398 -04:00 [INF] Route matched with {action = "Index", controller = "Session"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] Index(System.String) on controller UniversalDashboard.Controllers.SessionController (Universal.Server).
2024-05-28 11:22:29.399 -04:00 [INF] Executing StatusCodeResult, setting HTTP status code 200
2024-05-28 11:22:29.399 -04:00 [INF] Executed action UniversalDashboard.Controllers.SessionController.Index (Universal.Server) in 1.3141ms
2024-05-28 11:22:29.399 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.SessionController.Index (Universal.Server)'
2024-05-28 11:22:29.399 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/internal/session/e23667b2-9efa-4f06-99e5-a95c9871d971 - - - 200 0 - 3.9069ms
2024-05-28 11:22:34.206 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - -
2024-05-28 11:22:34.209 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:34.209 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:34.209 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:34.209 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:34.210 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:34.211 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:34.211 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:34.211 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:34.211 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - - - 401 0 - 4.6327ms
2024-05-28 11:22:34.396 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/api/internal/session/e23667b2-9efa-4f06-99e5-a95c9871d971 - -
2024-05-28 11:22:34.398 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.SessionController.Index (Universal.Server)'
2024-05-28 11:22:34.398 -04:00 [INF] Route matched with {action = "Index", controller = "Session"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] Index(System.String) on controller UniversalDashboard.Controllers.SessionController (Universal.Server).
2024-05-28 11:22:34.399 -04:00 [INF] Executing StatusCodeResult, setting HTTP status code 200
2024-05-28 11:22:34.400 -04:00 [INF] Executed action UniversalDashboard.Controllers.SessionController.Index (Universal.Server) in 1.0392ms
2024-05-28 11:22:34.400 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.SessionController.Index (Universal.Server)'
2024-05-28 11:22:34.400 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/internal/session/e23667b2-9efa-4f06-99e5-a95c9871d971 - - - 200 0 - 3.4872ms
2024-05-28 11:22:35.341 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - -
2024-05-28 11:22:35.343 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:35.343 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:35.343 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:35.343 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:35.345 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:35.345 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:35.345 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:35.345 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:35.345 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - - - 401 0 - 4.2819ms
2024-05-28 11:22:37.417 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - -
2024-05-28 11:22:37.420 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:37.420 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:37.420 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:37.420 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:37.422 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:37.422 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:37.422 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:37.422 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:37.422 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - - - 401 0 - 4.8783ms
2024-05-28 11:22:39.398 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest/api/internal/session/e23667b2-9efa-4f06-99e5-a95c9871d971 - -
2024-05-28 11:22:39.400 -04:00 [INF] Executing endpoint 'UniversalDashboard.Controllers.SessionController.Index (Universal.Server)'
2024-05-28 11:22:39.401 -04:00 [INF] Route matched with {action = "Index", controller = "Session"}. Executing controller action with signature System.Threading.Tasks.Task`1[Microsoft.AspNetCore.Mvc.IActionResult] Index(System.String) on controller UniversalDashboard.Controllers.SessionController (Universal.Server).
2024-05-28 11:22:39.402 -04:00 [INF] Executing StatusCodeResult, setting HTTP status code 200
2024-05-28 11:22:39.402 -04:00 [INF] Executed action UniversalDashboard.Controllers.SessionController.Index (Universal.Server) in 1.0352ms
2024-05-28 11:22:39.402 -04:00 [INF] Executed endpoint 'UniversalDashboard.Controllers.SessionController.Index (Universal.Server)'
2024-05-28 11:22:39.402 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest/api/internal/session/e23667b2-9efa-4f06-99e5-a95c9871d971 - - - 200 0 - 3.4190ms
2024-05-28 11:22:41.483 -04:00 [INF] Request starting HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - -
2024-05-28 11:22:41.485 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:41.485 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:41.485 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:41.485 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:41.487 -04:00 [INF] Authorization failed. These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
2024-05-28 11:22:41.487 -04:00 [INF] AuthenticationScheme: Cookies was challenged.
2024-05-28 11:22:41.487 -04:00 [INF] AuthenticationScheme: Bearer was challenged.
2024-05-28 11:22:41.487 -04:00 [INF] AuthenticationScheme: Basic was challenged.
2024-05-28 11:22:41.487 -04:00 [INF] Request finished HTTP/1.1 GET http://dashboardtest.ddmi.intra.renhsc.com/api/v1/identity/my - - - 401 0 - 4.4542ms

Topic		Replies	Views
SAML2 and Azure AD PowerShell Universal	6	750	January 13, 2023
SAML2 Setup Issues PowerShell Universal	6	610	July 1, 2022
Okta SAML - 404 page PowerShell Universal	1	18	April 8, 2025
SAML2 fails with IDp initiated login PowerShell Universal	1	806	September 20, 2022
SAML2 Metadata for PSU PowerShell Universal	0	32	August 26, 2024

Problems using SAML Authentication + Okta

Related topics