SSO not working in Website Integration

[Tobias Heeb]

We added a website integration with ADFS SSO a while ago and it worked without any problems.

But recently we realized that SSO with ADFS is not working anymore.

If we deactivate SSO and enable Windows Auth. directly on the webserver, it works.

Has this something to do with the redirect to the SSO IdP?

Many Thanks

[Tobias Heeb]

No it was in my opinion a Bug. We analyzed it with TAC. No Solution. What we later found out is that our ADFS had a certificate from an Internal CA and the Certificate of the Website was from a public CA. After using a certificate from a public CA for ADFS it worked. Again in my opinion a Bug with certificate handling. Maybe it also works with only domain certificates. But don't mix them. I don't know if this is still the case but it was back in 2021.

[ashok_boin]

Hi,

Need further details. This is for Webex teams?

[Tobias Heeb]

Hi

Yes this is for Webex Teams.

Best Regards

[ashok_boin]

In that case, please follow this specific link which will aid in your troubleshooting.

Administration - Single Sign-On Integration in Control Hub (webex.com)

[Tobias Heeb]

Thank you very much for the link!

I configured SSO on our site. Login from Webex Teams on Windows and Android is working.

However the Website does still not work.

Is there somewhere a special configuration or do I have to configure the website to use a webex SSO IdP?

Another question was if it is possible to deactivate SSO for specific Users. Not all Users in our webex site have a corresponding AD Account. If I activate SSO they can't login anymore.

[ashok_boin]

As per your shared image in first e-mail, the issue is not so clear as the error says "Site is not available". 

Have you followed the steps below?

Administration - Configure Single Sign-On for Cisco Webex Site

If yes, can you please show the URL and SSO related error?

[ErnestoJuarez]

Thank you very much for the link! It solved my issue for which i came looking for on this thread

[Tobias Heeb]

It seems like a bug in cisco webex.

When I add the same site to a Space it works. And after adding it to a space the website integration from the left toolbar also works.

[Tobias Heeb]

I made the screenshot without url on purpose.

It's like https://domain/application

If i open it in a browser, i get redirected to our ADFS IdP and after authentication redirected to the application.

I have followed the SSO installation guideline and SSO for Webex itself worked without any problems.

But the SSO for the Website Integration in Webex did not work.

With an older version of Webex this authentication flow also worked in Webex.

It seems this is not possible anymore. Maybe the redirect to our IdP is not allowed anymore?

If I deactivate the SSO flow and use Windows Authentication there is no redirect and the website works fine in Webex.

[Jeff Marshall]

If you're seeing the issue still, and it worked in a previous version of the Webex app but stopped in a newer version then you should consider opening a support case with the TAC team who support the Webex app. You can reach them via one of the contact methods on https://help.webex.com/contact.