Skip to main content

Troubleshooting: SSO login

This article addresses some Frequently Asked Questions about SSO.

I
Written by Ian Hamilton

1. “400 general nonsuccess” error.

This error usually means some required information is missing from the user profile in your SSO provider.

What to do:

  • Log in to your SSO provider

  • Make sure the first name and last name are filled in

If you’re still seeing the error after updating the details, please reach out to Thoropass for further investigation.

2. “Malformed certificate” error

SSO relies on a security certificate from your provider. If that certificate has expired, login attempts may fail with this error.

What to do:

  • Contact Thoropass to disable SSO and re-invite you to the workspace.

  • You will need to reconfigure SSO with a new certificate.

3. MFA requested after setting up SAML SSO.

After configuring SSO in your Thoropass workspace, our servers need to sync with your SSO provider to complete the change in the backend; during this time users may still be required to input an MFA code at login.

Please note:

  • This process can take up to 24 hrs.

  • Once completed, MFA will no longer be required.

  • If prompted to authenticate after 24 hrs, please reach out to our Support team.

Did this answer your question?