search

SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.35k stars 159 forks source link

SSO Integration Issue #192

Closed arishwani closed 1 year ago

arishwani commented 1 year ago

Hi Team, I am having issue with integration VECTR into SSO. The error is "No Reply address was provided". Although, I provided the Reply Address. I tried both AzureAD and SAML but wouldn't work.

Any recommendation, please?

VECTR_Issue
SRAPSpencer commented 1 year ago

When you input the SSO IdP into VECTR it will generate a list of URLs, these URLs should be put into the SSO entry under the IdP platform(Azure).

I'll leave this open but we don't usually offer community support for SSO, see the guidelines.

https://github.com/SecurityRiskAdvisors/VECTR/issues/146

arishwani commented 1 year ago

Hi @SRAPSpencer. Yes, I put those list of URLs into SSO in Azure platform but still won't work? I get the that error.

doodleincode commented 1 year ago

The error means that you didn't specify the VECTR callback URL in AAD. Can you double check this. The VECTR callback URL is https://<your_vectr_hostname>:[<port>]/auth/login/callback

If you've setup an OIDC application, the callback URL in AAD is the "Redirect URI":

image

If you've setup a SAML2 application, the callback URL in AAD is the "Reply URL (ACS)":

image

arishwani commented 1 year ago

Yes, I followed those steps as well but didn't work.

doodleincode commented 1 year ago

Unfortunately we cannot provide SSO onboarding support to the open community as configuration of SSO with the identity / SSO provider is highly variable as well as differences in organizational level security policies and procedures that can impact how SSO is configured. If you're not already on our Discord channel, I would recommend joining and asking the community for help. https://discord.gg/2FRd8zf728