# Authentication failed: SAML login failed

**URL:** <https://forum.ansible.com/t/authentication-failed-saml-login-failed/30526>\
**Category:** AWX Project\
**Created:** [June 10, 2019, 10:00pm UTC](https://forum.ansible.com/t/authentication-failed-saml-login-failed/30526 "2019-06-10T22:00:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Larry\_Bakun](https://avatars.discourse-cdn.com/v4/letter/l/41988e/32.png) [@Larry\_Bakun](https://forum.ansible.com/u/Larry_Bakun)\
**Post date:** [June 10, 2019, 10:00pm UTC](https://forum.ansible.com/t/authentication-failed-saml-login-failed/30526/1 "2019-06-10T22:00:13Z")

</div>

Hi,  
I’m switching from the LDAP to SAML authentication and getting this error message:  
Authentication failed: SAML login failed: [‘invalid\_response’] (The response was received at [https://awxurl:8052/sso/complete/saml/](https://awxurl:8052/sso/complete/saml/) instead of [https://awxurl/sso/complete/saml/](https://awxurl/sso/complete/saml/)).

Looks like docker’s container port is getting appended to the URL.

Does anyone know how to fix it?

Regards,  
Larry

---

<div class="post-metadata">

**Author:** ![Larry\_Bakun](https://avatars.discourse-cdn.com/v4/letter/l/41988e/32.png) [@Larry\_Bakun](https://forum.ansible.com/u/Larry_Bakun)\
**Post date:** [June 10, 2019, 11:17pm UTC](https://forum.ansible.com/t/authentication-failed-saml-login-failed/30526/2 "2019-06-10T23:17:52Z")

</div>

Looks like the same question here: [https://groups.google.com/forum/#!searchin/awx-project/saml$208052%7Csort:date/awx-project/aQTtlsm6Zlc/f7R8ePlJBAAJ](https://groups.google.com/forum/#!searchin/awx-project/saml$208052%7Csort:date/awx-project/aQTtlsm6Zlc/f7R8ePlJBAAJ)  
and never was answered… I also use nginx for SSL part.

---

<div class="post-metadata">

**Author:** ![Larry\_Bakun](https://avatars.discourse-cdn.com/v4/letter/l/41988e/32.png) [@Larry\_Bakun](https://forum.ansible.com/u/Larry_Bakun)\
**Post date:** [June 11, 2019, 7:15pm UTC](https://forum.ansible.com/t/authentication-failed-saml-login-failed/30526/3 "2019-06-11T19:15:43Z")

</div>

Got it to work using this post: [https://github.com/ansible/awx/issues/1016](https://github.com/ansible/awx/issues/1016)

Just in case If anyone needs it: I’m running AWX 4.0.0 in the docker containers. In my case it was enough to add one missing parameter to the proxy configuration:

`

```auto
proxy_set_header X-Forwarded-Port 443;

```

`

---

<div class="post-metadata">

**Author:** ![Raja\_V](https://avatars.discourse-cdn.com/v4/letter/r/8dc957/32.png) [@Raja\_V](https://forum.ansible.com/u/Raja_V)\
**Post date:** [July 29, 2019, 3:40am UTC](https://forum.ansible.com/t/authentication-failed-saml-login-failed/30526/4 "2019-07-29T03:40:43Z")

</div>

We had fixed the same via F5 load balancer.

Regards,  
Raja V
