topic Re: Login issue using Chrome on Mac in ArcGIS Online Questions

Login issue using Chrome on Mac

JoshObrecht1 — Wed, 31 Jan 2018 18:35:10 GMT

We have noticed that the following occurs when trying to log onto ArcGIS Online using Chrome on a Mac. This does not occur using Safari on the same Mac machine, nor on Chrome on a Windows machine. The message comes up as "Unable to login using Idp Error parsing 'NAME_ID' from SAML response."

Re: Login issue using Chrome on Mac

Anonymous User — Tue, 06 Feb 2018 20:53:21 GMT

Are you using enterprise logins?

Re: Login issue using Chrome on Mac

JoshObrecht1 — Tue, 06 Feb 2018 21:06:09 GMT

Yes, but the message was coming up before logging into the Enterprise.

Re: Login issue using Chrome on Mac

Anonymous User — Tue, 06 Feb 2018 22:37:40 GMT

So you get this error message just by navigating to https://www.arcgis.com/home/signin.html in Chrome on a Mac? You don't even click on the "enterprise login" button?

Does this happen on any other machines?

Re: Login issue using Chrome on Mac

JoshObrecht1 — Tue, 06 Feb 2018 22:40:48 GMT

Correct. This came from a campus user so I am not sure if it happens on other Macs. We do not having any where I am.

Re: Login issue using Chrome on Mac

Anonymous User — Tue, 06 Feb 2018 23:01:29 GMT

I just tested this workflow here and I wasn't able to reproduce. I would suggest the following steps to continue troubleshooting on your end:

1. Test this on other Macs in your network and see if the same issue reproduces. It could be a machine specific issue.

2. Check the version of Chrome on the problematic machine and see if it's up to date.

Re: Login issue using Chrome on Mac

BillLeddy — Fri, 08 Feb 2019 22:48:07 GMT

I had this issue, but only when I try to enable signed requests in the Identity Provider configuration in the ArcGIS Enterprise security settings. Checking the "Sign using SHA256" option seems to make no difference.

What I have discovered is that you need to configure these settings in ArcGIS enterprise before getting the metadata to be used when configuring the Relying Party Trust in the Identity Provider Service. Otherwise the metadata is missing the certificate information needed to handle the signed requests. If you have the Relying party's federation metadata URL configured in the trust properties, you can "Update from Federation metadata..." after making changes to the ArcGIS Enterprise settings. You may need to replace the token in the URL with a fresh one.