Unauthorized access error when connecting with Okta App via SAML

[brosales (Blake)]

• which versions are you using : SonarQube Community 9.9
• what are you trying to achieve : OKTA SSO Using SAML
• what have you tried so far to achieve this :

Unauthorized error when connecting with Okta to SonarQube 8.6 Enterprise by SAML

Hello, i’m using: SonarQube Enterprise 8.6 https://hub.docker.com/_/sonarqube deployed on an EKS cluster with https://github.com/Oteemo/charts No plugins are installed My issue : i’m trying to connect SonarQube to Okta using SAML Here is the sonar side configuration : [image] [image] Here is the okta side configuration of the URLS [image] I get this error message when i access sonarqube by the okta application : https://i.imgur.com/OAYEeUI.png When then i click on “home” i get ther…

Experiencing the same issue as the post above. I am getting an “unauthorized” error page after attempting to access Sonarqube App within Okta.

When I click “Home” it takes me to the projects tab within my sonarqube.

When I click “Log in” on the top right I am able to reach the correct page displaying the "Log in with SAML " button.

Has anyone else encountered this error? I’d like for Okta to reach the “Log in with SAML” page without having to jump through the hoops.

The fix mentioned in the linked post above in which the resolution was effectively to
Setting the Single sign-on URL within Okta SAML Integration to https://sonarqube.mycompany.com/sessions/init/saml

and setting the Other Requestable SSO URLs in Okta to https://sonarqube.mycompany.com/oauth2/callback/saml did not work for me.

(Note: I did replace the url with my SonarQube.)

BTW. This documentation also fails to mention to set the Provider Name to SAML
Else the “Log in with SAML” button will not display correctly.

How to set up Okta

[ganncamp (G Ann Campbell)]

Hi,

What do you see in the network tab of your browser’s developer tools when this is going on?

 
Ann

[brosales (Blake)]

Ann,

Anytime I click on the app within Okta i’m unable to get anything of use to show up within the network tab of the dev tools. I think this is because it opens the link in a new tab.

I haven’t changed anything since this post, but the Projects screen is now showing up momentarily and automatically redirects to the “SAML button” screen after clicking “home”. So it seems l am now having the exact same issue as the linked post.

[brosales (Blake)]

So, after the linked post issue was replicated 1:1; I applied the recommended changes to the SAML Integration Settings within the second step on the Okta side.

Single Sign On, Recipient, and Destination URL should be set to:
https://sonarqube.mycompany.com/sessions/init/saml

“Show advanced settings” > Other Requestable SSO URLs
URL should be set to what the official documentation says:
https://sonarqube.mycompany.com/oauth2/callback/saml
and the index set to 0.

[ganncamp (G Ann Campbell)]

Hi,

Is this working for you now? Sorry, but it’s not clear to me.

 
Ann

[brosales (Blake)]

Hi Ann, yes it works now.