Question
LTIMindtree
SA
Last activity: 5 Jan 2023 1:56 EST
SSO-Login Issue - Invalid State Parameter error
We have configured Single Sign-On Authentication Service and it was working fine for sometime. Started facing an error while using SSO Authentication Service as "Invalid State Parameter Received".
Did not get any clue on why are we facing the issue. We have even tried re-configure the SSO Authentication Service again but the same problem occured.
Accepted Solution
LTIMindtree
SA
Follow-Solution for identified RCA:
As part of Application Security enhancements, CSRF Settings enabled in the application and 'Enable Same Site Cookie Attribute' which is selected with "Strict" is causing the issue. Updated the value from "Strict to Lax" which fixed the SSO Login Issue.
Updated: 5 Jan 2023 1:56 EST
LTIMindtree
SA
Root Cause Identified: Organization wide Domain change caused the new IP address invloved so SSO Calls are not reaching the IDP / IAM Layer for authenticity causing the Invalid State Parameter error. Working on the Solution.
Pegasystems Inc.
GB
@Kishore Sanagapalli thanks so much for keeping up updated.
Once you find the solution would you be happy to post it here and mark your answer as 'Accept Solution'?
Thanks again!
LTIMindtree
SA
Yes, Sure
Accepted Solution
LTIMindtree
SA
Follow-Solution for identified RCA:
As part of Application Security enhancements, CSRF Settings enabled in the application and 'Enable Same Site Cookie Attribute' which is selected with "Strict" is causing the issue. Updated the value from "Strict to Lax" which fixed the SSO Login Issue.