Missing sign-in URL when IdP iniated

[adrischw]

Situation: I'm using VMware WorkspaceONE AccessI (a.k.a. Identity Manager, vIDM) as Identity Provider (IdP) and have configured our Pulse Secure VPN as Service Provider (SP) acording to "Configuring Connect Secure as a SAML 2.0 Service Provider" from here: https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Configuring%20Connect%20Secure_2...

When I connect PulseSecure VPN (SP initiated): everything is okay

When I go to the Workspace ONE Access Portal and select PulseSecure VPN (IdP initiated): I get the error message you can see below.

SAML Transfer failed. Please contact your system administrator.
Detail: FAILURE: Missing sign-in URL

Anyone has an Idea where to start looking for a missing sign-in URL?

Thanks for your Input,

Adrian

[[email protected] · Accepted solution]

Please configure the SAML Relay State value on the IDP configuration to match the sign-in URL of the VPN server, so that it will be sent in the SAML response to the VPN server.