In this article, we will cover some of the most common SSO issues that we come across while setting up SSO.
500 Internal Server Error: This error refers to an issue wherein we are unable to match the user profile fields sent by your SSO provider to Bettermode.
How to resolve this Issue?
To resolve this issue, please ensure that you are using the following structure:sub (required): The ID of the user in your product or platform. This value will be stored as externalId on Bettermode.
name (required): The name of the user.
email (required): The email of the user. This email address is considered a verified address. You should make sure that emails are verified on your side.
These are the mandatory fields that need to be sent to Bettermode for SSO to work properly. To learn more about other fields, please visit our SSO Guide here: SSO Profile Fields.
Incorrect Redirect URL: When the Redirect URL that is added on your SSO provider’s side is incorrect, the result will be this error.
How to resolve this Issue?
To resolve this issue, please go to your site’s Profile Picture on the top right→ Administration→ Settings→ Authentication→ Single Sign-On. Scroll down to the bottom of the page and you’ll be able to see the correct Redirect (callback) URL that needs to be added. Once updated, the error should be resolved.
Cannot retrieve user profile data: If all the information needed (User's id, email, and name) is not provided inside the id_token or the OAuth2 provider does not follow OpenID Connect, Bettermode will fetch the User Information from the User Profile URL added in the SSO Settings. If Bettermode is unable to fetch the information, “Cannot retrieve user profile data” error will be returned.
How to resolve this Issue?
To resolve this issue, please ensure that when Bettermode sends a GET request, all mandatory fields should be returned in JSON format. To learn more about other fields, please visit our SSO Guide here: SSO Profile fields
