CSRF verification error for SAML auth on AWX-Operator deployment

Archives AWX Project
,
1

Hi all,

AWX-Operator version: 0.29.0
AWX version: 21.6.0
Ingress Type: ingress

I have a 3 replica AWX deployment on a K8s cluster using AWX-Operator. I am trying to setup SAML authentication on this but getting CSRF verification failure when attempting to login via the SAML endpoint.

Error shown in the browser is shown in the attached image. Most relevant logs are in the web container:

2023-02-22 18:05:07,283 WARNING [867a2cf55ed8427eab2993fdd60a8fb4] django.security.csrf Forbidden (Referer checking failed - https://mydomain.okta.com/ does not match any trusted origins.): /

I have tried updating the deployment config map to set the CSRF_TRUSTED_ORIGINS variable in the AWX settings.py file but this doesn’t work.

Any advice on how to add the SAML referrer would be great?

Thanks!

(attachments)

awx_saml_csrf_verification_error-.png
awx_saml_csrf_verification_error-.png1384×414 9.16 KB

2

when do you get that 403? do you see the login splash screen? do you see the saml login button on the splash screen? do you get the 403 when entering credentials or when getting a response back from saml?

thanks

AWX Team