SSO Deeplink loop

0
Hi everyone,   I have configured the SAML 2.0 module to set up SSO with Azure AD. I am also using the Deeplink module to divert users to a specific page in the application. I have an Enterprise Application in Azure for each of my Environments, Test, Acceptance, and Production. I have successfully configured the SSO functionality in Test and Acceptance, but in Production, I get stuck in a loop when trying to visit the deep link URL. I can log in to the root URL in all three environments, it is only when using the Deeplink, and only when in Production do I get the issue.   I have checked all of the settings including the Model options which are the same for all environments, and the Azure Enterprise application Single Sign On settings are exactly the same for each application, apart from the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) which are relevant to each applications URL.   The SP configuration is fine and I have tried using custom entity ID.   The only difference I have between Prod and the other environments is that I have a custom domain set up.  However, I have tried without using the custom domain (so https://myapp.mendixcloud.com/link/deeplink) and configured Azure AD SSO to use this as the Identifier.  Nothing I try is working.   Any ideas?  Or any further detail needed?   thanks
asked
2 answers
3

This could be an issue with the SameSite cookie. There is a solution in the Deeplink documentation if this is the case.

 

https://docs.mendix.com/appstore/modules/deep-link/#endless-redirect-loop-mendix-9-and-higher

 

I hope this helps!

answered
1

Hi,

check this setting in your environment variables: 

DeepLink.EnableLeadingSlash < for my case, this required to be set to false.

 

As robert said, you can change the runtime settings:

com.mendix.core.SameSiteCookies to value: Lax   

 

 

answered