Common SSO setup errors
Configuring Single Sign-On (SSO) for Fundraise Up enhances security and streamlines user access. This guide outlines common errors you may encounter during the setup process and provides troubleshooting steps to resolve them efficiently.
Setting Up Single Sign-On (SSO)
When configuring SSO for Fundraise Up, you may encounter several potential errors:
- Invalid Identity Provider URL: Ensure the IdP URL is correct and accessible.
- Make sure there are no typos in the URL and that it is the correct endpoint for your IdP.
- Incorrect Issuer ID: Verify that the Issuer ID matches the data in your IdP.
- Double-check for any discrepancies or formatting issues.
- Certificate Issues: Check that your certificate is valid and correctly configured.
- Ensure the certificate hasn’t expired and is correct in both the IdP and Fundraise Up.
- Invalid SAML Message Format: Review your IdP's SAML configuration.
- Ensure the SAML message adheres to the required specifications and format
- Authentication Issues: Confirm your credentials and IdP settings.
- Verify the username and password used for authentication. Check if any additional authentication factors are required.
- Connection Timeout: Verify your network settings and IdP availability.
- Ensure there are no network issues preventing communication with the IdP. Check firewall and proxy settings if necessary.
- Unexpected IdP Response: Double-check your SAML settings.
- Compare the response from the IdP with the expected format and content. Look for any anomalies or errors in the SAML response.
- Missing Required Attributes: Review attribute settings in your IdP.
- Ensure that all required attributes are correctly configured and included in the SAML response.
- Unsupported Signature Method: Ensure you're using a supported signature method.
- Verify that the signature method used by your IdP is supported by Fundraise Up. The following signature algorithms are supported:
- RSA-SHA1
- RSA-SHA256
- RSA-SHA384
- RSA-SHA512
- DSA-SHA1
- DSA-SHA256
- ECDSA-SHA1
- ECDSA-SHA256
- ECDSA-SHA384
- ECDSA-SHA512
- Verify that the signature method used by your IdP is supported by Fundraise Up. The following signature algorithms are supported:
Troubleshooting Domain Verification
If you encounter a "DNS not configured correctly" error:
- Double-check all fields in your DNS record match exactly what Fundraise Up provides.
- Ensure you've added the record to the correct domain. You can use “@” instead of the complete domain name to represent the root domain if required by your DNS provider.
- Remember that DNS changes can take time to propagate (up to 48 hours in some cases).
- Verify the public DNS record is correct using a tool like nslookup or dig.
For both SSO configuration and domain verification, it's crucial to enter all information accurately. If issues persist after careful review and waiting for DNS propagation, contact Fundraise Up support for further assistance.