Troubleshooting single-sign on (SSO) with an external identity provider (IDP)
Who is this article for?
Users unable to log in to Hub with corporate ID, and Administrators managing Hub users.
Administrator permissions required for access to Hub Admin Console.
This article answers commonly asked questions about signing in to Ideagen Hub using a corporate identity provider.
1. Issue
If you receive the error message:
"Invalid SAML response received: PreSignUp failed with error. External user does not exist in the DB. Please verify the user has been imported"
This indicates a mismatch between the values obtained from the identity provider (IDP) attributes mapping and the user details imported or created in Hub user management.
To resolve this error, determine if anyone else can log in to Hub:
- If someone can log in, verify they are a Hub administrator who can access Admin Console from the top-left menu
- If no administrators can log in, contact Ideagen Support to create a break-glass administrator account. You need to provide a unique username for this account. You can use the same email address as an existing administrator account
2. Solution
Once an administrator can log in to Hub, to verify the configuration, follow these steps:
- Go to Admin Console.
- Select User Management.
- Click Edit on the affected user's record.
- Ensure the authentication type is set to External.
- Note the username and email address values.
- Go to Admin Console.
- Select Security Center.
- Go to Authentication, External IDP configuration.
- Click Configure.
- Click Edit to check the settings for the identity provider you are attempting to use.
- Confirm the mapped attributes contain the same values as the username and email address set up for the affected user in User Management.
Note: You may need your IT administrator's help to confirm the attributes are correct, as the mismatch could be caused by incorrect attribute mapping.