Some SCA Cloud access customers with specific trust configuration in their Identity webapp cannot connect AWS IAM Identity center and GCP cloud provider

Identified
Identified

Hello, Root cause was identified - R&D is working on a fix. We will update shortly Thank you

Investigating

Please be aware that some customers with specific trust configuration in their Identity webapp can not connect to GCP and AWS IDC cloud provider. This is relevant for Identity as IDP and not 3rd party / OKTA and relevant only if webapp configuration in the Trust section, under 'SP' configuration, is 'Metadata'.

What happened: Some users who tried to elevate to an AWS IAM Identity center/GCP role got "Oops! Something went wrong. Please try again in a few minutes" (error CA1040). Retrying didn't help. No access was granted.

Who was affected: Tenants whose AWS IAM Identity center/GCP application has no SAML trust configured (SP Entity ID) in Identity. These tenants could elevate normally before this date.

Workaround: Go to webapp config in Identity manage space :

Go Trust (verify that config is initially set on 'Metadata') Service Configuration section Choose "Manual configuration" In the 'SP Entity field' -> enter any valid url (dummy) Choose again 'Metadata' and Save

Thank you, Idira Secure Cloud Access

Began at:

Affected components
    • North Virginia (us-east-1)
    • Frankfurt (eu-central-1)
    • London (eu-west-2)
    • Canada (ca-central-1)
    • Singapore (ap-south-east-1)
    • Mumbai (ap-south-1)
    • Sydney (ap-southeast-2)
    • Tel Aviv (il-central-1)
    • UAE (me-central-1)
    • Tokyo (ap-northeast-1)
    • Sao Paulo (sa-east-1)