morincer / teamcity-plugin-saml

The plug-in adds ability to authenticate users by SAML-based SSO providers (like Okta, Onelogin etc.)
MIT License
24 stars 16 forks source link

SAML Redirect Uses Wrong URL #106

Closed alec-hs closed 1 year ago

alec-hs commented 1 year ago

On Version 2022.04.4 (build 108763) of TC, when clicking the "Login with SSO" button it tries to redirect to a TC url not the IDP url.

image image

In the SAML settings, Azure AD IDP metadata is imported correctly from XML file and the "Single Sign-on URL" points to https://login.microsoftonline.com/xxxx-xxxx-xxxx/saml2 but the plugin seems to not redirect correctly.

alec-hs commented 1 year ago

Resolved this by turning off "Reverse rewrite host in response headers" in IIS Application Request Routing settings.

image