KB-2139 How to enable additional SAML Assertion validations on Appian Cloud

Elly Meng — Tue, 22 Sep 2020 21:29:49 GMT

Current Revision posted to Appian Knowledge Base by Elly Meng on 9/22/2020 9:29:49 PM

Purpose

Appian has introduced additional SAML Assertion validations for improved security that will be enabled by default on Appian Cloud versions 20.3 and later. This feature is not enabled by default on Appian Cloud versions 20.2 and earlier. As this feature validates additional SAML Assertion parameters, the introduction of this feature may result in SAML login failures for some users.

To verify if any SAML configuration changes are needed to pass the additional SAML Assertion validations, Appian Cloud customers on versions 20.2 and earlier can take the following steps to request this feature be enabled.

Instructions

To verify if this feature will cause SAML login issues:

Take a SAML Trace as outlined in the last section of KB-1450. The SAML trace must include the SAML Assertion from a login attempt.
Navigate to the SAML Authentication section in the Admin Console and click into the desired SAML configuration.
Take screenshots of the page to be submitted in a later step.
Open a Support Case with Appian Support requesting that this additional SAML Assertion validation feature be enabled to confirm that users can log in successfully. Make sure to provide both the SAML trace from step 1 and the screenshots from step 3.

Affected Versions

This article applies to all versions of Appian Cloud.

Last Reviewed: August 2020

Tags: Security, SAML, integration, how-to, authentication, upgrade

KB-2139 How to enable additional SAML Assertion validations on Appian Cloud

Parmida Borhani — Tue, 11 Aug 2020 06:51:29 GMT

Revision 6 posted to Appian Knowledge Base by Parmida Borhani on 8/11/2020 6:51:29 AM

Purpose

Instructions

To verify if this feature will cause SAML login issues:

Take a SAML Trace as outlined in the last section of KB-1450. The SAML trace must include the SAML Assertion from a login attempt.
Navigate to the SAML Authentication section in the Admin Console and click into the desired SAML configuration.
Take screenshots of the page to be submitted in a later step.
Open a Support Case with Appian Support requesting that this additional SAML Assertion validation feature be enabled to confirm that users can log in successfully. Make sure to provide both the SAML trace from step 1 and the screenshots from step 3.

Affected Versions

This article applies to all versions of Appian Cloud.

Last Reviewed: August 2020

Tags: Security, SAML, how-to, authentication

DRAFT KB-[SP-4917] How to enable additional SAML Assertion validations on Appian Cloud

Parmida Borhani — Tue, 11 Aug 2020 06:50:00 GMT

Revision 5 posted to Appian Knowledge Base by Parmida Borhani on 8/11/2020 6:50:00 AM

Purpose

Instructions

To verify if this feature will cause SAML login issues:

Take a SAML Trace as outlined in the last section of KB-1450. The SAML trace must include the SAML Assertion from a login attempt.
Navigate to the SAML Authentication section in the Admin Console and click into the desired SAML configuration.
Take screenshots of the page to be submitted in a later step.
Open a Support Case with Appian Support requesting that this additional SAML Assertion validation feature be enabled to confirm that users can log in successfully. Make sure to provide both the SAML trace from step 1 and the screenshots from step 3.

Affected Versions

This article applies to all versions of Appian Cloud.

Last Reviewed: August 2020

Tags: Security, SAML, how-to, authentication

DRAFT KB-[SP-4917] How to enable additional SAML Assertion validations on Appian Cloud

Zach Puderbach — Fri, 07 Aug 2020 20:30:08 GMT

Revision 4 posted to Appian Knowledge Base by Zach Puderbach on 8/7/2020 8:30:08 PM

Purpose

Instructions

To verify if this feature will cause SAML login issues:

Take a SAML Trace as outlined in the last section of KB-1450. The SAML trace must include the SAML Assertion from a login attempt.
Navigate to the SAML Authentication section in the Admin Console and click into the desired SAML configuration.
Take screenshots of the page to be submitted in a later step.
Open a Support Case with Appian Support requesting that this additional SAML Assertion validation feature be enabled to confirm that users can log in successfully. Make sure to provide both the SAML trace from step 1 and the screenshots from step 4.

Affected Versions

This article applies to all versions of Appian Cloud.

Last Reviewed: August 2020

Tags: SAML, how-to, authentication

DRAFT KB-[SP-4917] How to enable additional SAML Assertion validations on Appian Cloud

Nicholas Van Dyke — Wed, 05 Aug 2020 21:32:08 GMT

Revision 3 posted to Appian Knowledge Base by Nicholas Van Dyke on 8/5/2020 9:32:08 PM

Purpose

Instructions

To verify if this feature will cause SAML login issues:

Take a SAML Trace as outlined in the last section of KB-1450. The SAML trace must include the SAML Assertion from a login attempt.
Navigate to the SAML Authentication section in the Admin Console and click into the desired SAML configuration.
Take screenshots of the page to be submitted in a later step.
Confirm if the Service Provider Entity ID field in the Admin Console matches the <saml:Audience> field value from the SAML Trace exactly.
If the fields from step 4 match, proceed to step 7.
If the fields from step 4 do not match exactly, update the <saml:Audience> field value on the Identity Provider configuration to match the Service Provider Entity ID value.
Open a Support Case with Appian Support requesting that this additional SAML Assertion validation feature be enabled to confirm that users can log in successfully. Make sure to provide both the SAML trace from step 1 and the screenshots from step 4.

Affected Versions

This article applies to all versions of Appian Cloud.

Last Reviewed: August 2020

Tags: SAML, how-to, authentication

DRAFT KB-[SP-4917] How to enable additional SAML Assertion validations on Appian Cloud

Zach Puderbach — Tue, 04 Aug 2020 21:51:45 GMT

Revision 2 posted to Appian Knowledge Base by Zach Puderbach on 8/4/2020 9:51:45 PM

Purpose

Appian has introduced additional SAML Assertion validations for improved security that will be enabled by default on Appian Cloud versions 20.3 and later. This feature is not enabled by default on Appian Cloud versions 20.2 and earlier. As this feature validates addition SAML Assertion parameters, the introduction of this feature may result in SAML login failures for some users.

To verify if any SAML configuration changes are needed to pass the additional SAML Assertion validations, Appian Cloud Customers on 20.2 and earlier can take the following steps to request this feature be enabled.

Instructions

To verify if this feature will cause SAML login issues:

Take a SAML Trace as outlined in the last section of KB-1450. The SAML trace must include the SAML Assertion from a login attempt.
Navigate to the SAML Authentication section in the Admin Console and click into the desired SAML configuration.
Take screenshots of the page to be submitted in a later step.
Confirm if the Service Provider Entity ID field in the Admin Console matches the <saml:Audience> field value from the SAML Trace exactly.
If the fields from step 4 match, proceed to step 6.
If the fields from step 4 do not match exactly, update the <saml:Audience> field value on the Identity Provider configuration to match the Service Provider Entity ID value.
Open a Support Case with Appian Support requesting this additional SAML Assertion validation feature be enabled to confirm users can login successfully, providing the SAML trace from step 1 and the screenshots from step 4.

Affected Versions

This article applies to all versions of Appian Cloud.

Last Reviewed: August 2020

Tags: how-to, authentication

DRAFT KB-[SP-4917] How to enable additional SAML Assertion validations on Appian Cloud

Zach Puderbach — Tue, 04 Aug 2020 20:50:38 GMT

Revision 1 posted to Appian Knowledge Base by Zach Puderbach on 8/4/2020 8:50:38 PM

Purpose

Appian has introduced additional SAML Assertion validations for improved security that will be enabled by default on Appian Cloud versions 20.3 and later. This feature is not enabled by default on Appian Cloud versions 20.2 and earlier. As this feature validates addition SAML Assertion parameters, the introduction of this feature may result in SAML login failures for some users.

Instructions

To verify if this feature will cause SAML login issues:
1. Take a SAML Trace as outlined in the last section. The SAML trace must include the SAML Assertion from a login attempt.
2. Navigate to the SAML Configuration page in the Admin Console.
3. Confirm if the "Service Provider Entity ID" field in the Admin Console matches the <saml:Audience> field value exactly.
4. If the fields from 3) match, everything is cool beans
5. If not, update the <saml:Audience> field value on the IDP to match the "Service Provider Entity ID" value exactly.
6. Open a Support Case with Appian Support requesting this additional SAML Assertion validation feature be enabled to confirm users can login successfully.

Affected Versions

This article applies to all versions of Appian Cloud

Last Reviewed: August 2020

Tags: how-to, authentication