# CSRF verification error for SAML auth on AWX-Operator deployment

**URL:** <https://forum.ansible.com/t/csrf-verification-error-for-saml-auth-on-awx-operator-deployment/37689>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [February 22, 2023, 9:37pm UTC](https://forum.ansible.com/t/csrf-verification-error-for-saml-auth-on-awx-operator-deployment/37689 "2023-02-22T21:37:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [February 22, 2023, 9:37pm UTC](https://forum.ansible.com/t/csrf-verification-error-for-saml-auth-on-awx-operator-deployment/37689/1 "2023-02-22T21:37:37Z")

</div>

Hi all,

AWX-Operator version: 0.29.0  
AWX version: 21.6.0  
Ingress Type: ingress

I have a 3 replica AWX deployment on a K8s cluster using AWX-Operator. I am trying to setup SAML authentication on this but getting CSRF verification failure when attempting to login via the SAML endpoint.

Error shown in the browser is shown in the attached image. Most relevant logs are in the web container:

```auto
2023-02-22 18:05:07,283 WARNING [867a2cf55ed8427eab2993fdd60a8fb4] django.security.csrf Forbidden (Referer checking failed - https://mydomain.okta.com/ does not match any trusted origins.): /

```

I have tried updating the deployment config map to set the CSRF\_TRUSTED\_ORIGINS variable in the AWX settings.py file but this doesn’t work.

Any advice on how to add the SAML referrer would be great?

Thanks!

> **(attachments)**
>
> ![awx_saml_csrf_verification_error-.png](https://us1.discourse-cdn.com/ansible/original/2X/e/efda56cfa6644a5ab33ae8da332ba1508aeb8090.png)

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [March 1, 2023, 7:37pm UTC](https://forum.ansible.com/t/csrf-verification-error-for-saml-auth-on-awx-operator-deployment/37689/2 "2023-03-01T19:37:55Z")

</div>

when do you get that 403? do you see the login splash screen? do you see the saml login button on the splash screen? do you get the 403 when entering credentials or when getting a response back from saml?

thanks

AWX Team