{"action":"created","issue":{"url":"https://api.github.com/repos/Netflix/security_monkey/issues/956","repository_url":"https://api.github.com/repos/Netflix/security_monkey","labels_url":"https://api.github.com/repos/Netflix/security_monkey/issues/956/labels{/name}","comments_url":"https://api.github.com/repos/Netflix/security_monkey/issues/956/comments","events_url":"https://api.github.com/repos/Netflix/security_monkey/issues/956/events","html_url":"https://github.com/Netflix/security_monkey/issues/956","id":299115623,"number":956,"title":"Trouble with SSO authentication: response from OneLogin isn't valid","user":{"login":"EmptyLaughter","id":15055516,"avatar_url":"https://avatars0.githubusercontent.com/u/15055516?v=4","gravatar_id":"","url":"https://api.github.com/users/EmptyLaughter","html_url":"https://github.com/EmptyLaughter","followers_url":"https://api.github.com/users/EmptyLaughter/followers","following_url":"https://api.github.com/users/EmptyLaughter/following{/other_user}","gists_url":"https://api.github.com/users/EmptyLaughter/gists{/gist_id}","starred_url":"https://api.github.com/users/EmptyLaughter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EmptyLaughter/subscriptions","organizations_url":"https://api.github.com/users/EmptyLaughter/orgs","repos_url":"https://api.github.com/users/EmptyLaughter/repos","events_url":"https://api.github.com/users/EmptyLaughter/events{/privacy}","received_events_url":"https://api.github.com/users/EmptyLaughter/received_events","type":"User","site_admin":false},"labels":[{"id":110134959,"url":"https://api.github.com/repos/Netflix/security_monkey/labels/bug","name":"bug","color":"fc2929","default":true},{"id":110134962,"url":"https://api.github.com/repos/Netflix/security_monkey/labels/help%20wanted","name":"help wanted","color":"159818","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2018-02-21T20:24:40Z","updated_at":"2018-03-02T11:47:51Z","closed_at":null,"author_association":"NONE","body":"## Please make sure that you have checked the boxes: \r\n\r\n- [x] Review the [Quickstart guide](quickstart.md)\r\n- [x] Search for both open and closed issues regarding the problem you are experiencing\r\n- [x] **For permissions issues** (Access Denied and credential related errors), please refer to the requisite docs before submitting an issue:\r\n[AWS](iam_aws.md), [GCP](iam_gcp.md), [OpenStack](iam_openstack.md), [GitHub](github_setup.md#access-keys-and-permissions)\r\n\r\n\r\n## Description of issue:\r\n\r\nI've set up the env-config/config.py file with the IdP values, and provided the SP values to the OneLogin test connector. I can see my app via my OneLogin portal, but when I try to access it, I get the following errors:\r\n\r\nError from log file:\r\n`ERROR: Error processing invalid_response`\r\nError message from webpage:\r\n`{\"message\": \"OneLogin authentication failed.\"}`\r\n \r\nAfter looking at the code in which these error messages have come from, I looked at the OneLogin python libraries to find that the cause is because of the response that I get back from OneLogin. The SP side is rejecting the IdP's response. I sniffed the SAML traffic to see the values sent back from the IdP, but I can't determine what's wrong with it (Destination, SignatureValue, x509Certificate, etc. are provided)\r\n\r\nIf anyone has integrated Security Monkey with OneLogin and has insight on what could be preventing the SSO verification, it would be appreciated."},"comment":{"url":"https://api.github.com/repos/Netflix/security_monkey/issues/comments/369900778","html_url":"https://github.com/Netflix/security_monkey/issues/956#issuecomment-369900778","issue_url":"https://api.github.com/repos/Netflix/security_monkey/issues/956","id":369900778,"user":{"login":"fstuck37","id":24397390,"avatar_url":"https://avatars1.githubusercontent.com/u/24397390?v=4","gravatar_id":"","url":"https://api.github.com/users/fstuck37","html_url":"https://github.com/fstuck37","followers_url":"https://api.github.com/users/fstuck37/followers","following_url":"https://api.github.com/users/fstuck37/following{/other_user}","gists_url":"https://api.github.com/users/fstuck37/gists{/gist_id}","starred_url":"https://api.github.com/users/fstuck37/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fstuck37/subscriptions","organizations_url":"https://api.github.com/users/fstuck37/orgs","repos_url":"https://api.github.com/users/fstuck37/repos","events_url":"https://api.github.com/users/fstuck37/events{/privacy}","received_events_url":"https://api.github.com/users/fstuck37/received_events","type":"User","site_admin":false},"created_at":"2018-03-02T11:47:51Z","updated_at":"2018-03-02T11:47:51Z","author_association":"NONE","body":"@mikegrima \r\nI think that's a great idea.\r\nMaybe join errors and ErrorReason into one line.\r\nWould something like this work?\r\n            current_app.logger.error('Error processing %s %s' % (''.join(errors),''.join(ErrorReason)))\r\nThen wrap the AuthResponse output with the conditional you specified.\r\nWish I knew more Python to help further with the code.\r\nHope what I've provided helps a little.\r\n\r\nI have to add, the change to the new model with multiple servers and Elastic Cache greatly improved performance. I have 40 accounts with 77,000 items and so far its working great.\r\n\r\nThanks again for all your help.\r\nFred"}}
{"actor":{"display_login":"fstuck37"}}