RSA SecurID Access Automatic Integrated Windows Authentication (IWA) not working

3 years ago

Originally Published: 2016-11-14

Article Number

000042269

Applies To

RSA Product Set: SecurID Access

Issue

Automatic IWA has been configured per Enable Automatic Integrated Windows Authentication but users are still presented with the portal login page where they need to either enter their credentials or click on the IWA icon.

The /var/log/symplified/symplified.log contains messages like:

2016-11-14/16:22:29.839/UTC [ajp-apr-8009-exec-4] ERROR com.symplified.service.appliance.sp.SPService[461] -  IP restrictions likely misconfigured for idp RSA SecurID Access IWA Connector
2016-11-14/16:22:29.840/UTC [ajp-apr-8009-exec-4] INFO com.symplified.service.appliance.sp.SPService[100] -  Pre-authentication policy evaluated to false, 
not initiating authentication with idp RSA SecurID Access IWA Connector

Cause

Configuring the IWA Identity Provider with Authentication Source Rules/IP Range using Classless Inter-Domain Routing (CIDR) notation, as below, will cause this issue.

Resolution

Use IP:NETMASK rather than CIDR notation to define the IP address range value. For example, rather than 192.168.20.0/24, use 192.168.20.0:255.255.255.0.

As always, be sure to re-publish after making this change.

Don't see what you're looking for?

Related Articles

Trending Articles