I'm having problems with v7.8 and my SSO solution that we have been using wi

mariod over 9 years ago

I'm having problems with v7.8 and my SSO solution that we have been using with previous versions of Appian.
Appian version 7.3 and earlier, we modify spring security files for our SSO solution and we also use the following settings in our custom.properites file.
conf.suite.SSO_ENABLED=
conf.suite.SSO_TYPE=
conf.suite.SSO_KEY=
conf.suite.SSO_HEADER=
Version 7.8 documentation has these setting as being ignored.

My SSO solution includes front end code that creates an Appian user for new users.
This part is working and new users can navigate to tempo and apps portal but they get error 403 – forbidden when they try navigating to the designer page.

Does anyone know what happen to the settings above and what I could be missing that would cause Error 403 Forbidden?
...

Discussion posts and replies are publicly visible

0 Alok Mohare
Appian Employee
over 9 years ago

Are those users Basic Users or Sys Admins? Can you see the designer page when you are logged in as a System Admin?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Eduardo Fuentes
Appian Employee
over 9 years ago

Do you see any warnings running this special version of checkengine?

checkengine -o -s
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mariod over 9 years ago

These are new users so they will be basic users but I did try to make one a sysadmin and the behavior is the same.

No warning running checkengine -o -s:
[appian@gaalpltapp00ba diagnostic]$ ./checkengine.sh -o -s
K 3.3 2009-08-26 Copyright (C) 1993-2009 Kx Systems
l64 16CPU gaalpltapp00ba.linux.us.ams1907.com 16 TEST 2015-10-17 Appian - Customer Development #45879
Querying the 16 gateways now ...
................
Query complete
--- --- --- --- --- --- --- ---
S U M M A R Y (2015-01-13 12:19:23.898 GMT) S U M M A R Y
_APP_ _ACTIVE_GW_ _STATUS_ _ISSUES_
Discussion Forums 1/1 Okay
Notifications Service 1/1 Okay
Notifications Email Processor 1/1 Okay
Channels 1/1 Okay
Collaboration 1/1 Okay
Collaboration Statistics 1/1 Okay
Personalization 1/1 Okay
Portal 1/1 Okay
Metadata Structure Service 1/1 Okay
Process-Design 1/1 Okay
Process-Analytics0000 1/1 Okay
Process-Analytics0001 1/1 Okay
Process-Analytics0002 1/1 Okay
Process-Exec00 1/1 Okay
Process-Exec01 1/1 Okay
Process-Exec02 1/1 Okay
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Eduardo Fuentes
Appian Employee
over 9 years ago

I read your post again and realized that the 403 is only when they go to /suite/designer. This is expected if they don't belong to the group called "Designers"
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mariod over 9 years ago

That was it Eduardo, thank you.
So I don't have to worry about the customs.properties setting anymore.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Eduardo Fuentes
Appian Employee
over 9 years ago

That's correct, per the documentation forum.appian.com/.../Single_Sign-On_Integration.html those settings are no longer used.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel