I’m not really getting any errors in the Tomcat logs or /var/log/messages. I eventually just get a 429 Too Many Redirects error. And the callback I’m referring too is what we need to put into the saml-callback-url propery in /etc/guacamole/guacamole.properties. Currently, we have the server name itself (https://<server<https://%3cserver>>). I’m assuming that needs to be something different.
Thanks, Harry From: Nick Couchman <[email protected]> Sent: Tuesday, December 17, 2024 3:20 PM To: [email protected] Subject: Re: Question about callback URL with SAML configuration CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. On Tue, Dec 17, 2024 at 3:13 PM Devine, Harry (FAA) <[email protected]<mailto:[email protected]>> wrote: We are on Guacamole 1.5.4 at the moment, and we have a mandate to implement MFA. We have been working with our IT department and using a test Guacamole server for the configuration testing. We were initially trying OpenID but we kept getting an invalid response_type value. So they suggested SAML, which we implemented and proved that we could log in. However, we do get an error from Guacamole because the MFA doesn’t seem to know how to return the response back to our Guacamole server. What error are you seeing? And what messages are you getting in the logs? So, my question is: how to I implement or configure the Callback URL on our Guacamole server so the response that comes back can be retrieved? Are you talking about the callback URL in the Guacamole configuration, or one specific to the SAML IdP? -Nick
