Skip to main content

I am writing to share a surprising experience, that maybe others have had but no one wants to go through. We’ve been active since last June (about 8 months) and we have SAML SSO set up so that our users do not have to enter their UN and PW (they haven’t been given Docebo passwords). A few days ago, our users started submitting tickets to our internal team that they could not get into our Docebo portal. When we tried it ourselves, we saw the standard Docebo login page, asking for UN and PW. (Not the hybrid one, where you could enter UN and PW or choose SSO.) 

I went to look at the SAML app and it was missing from the Admin page entirely. When I went to the Apps area, I saw the SAML app was there and inactive. I reactivated it and then saw that the hybrid login page was now available. When I looked at the SAML settings, it appeared that all of our SAML SSO settings were still in place except the SSO Behavior field was set to Show Standard Login page. I clicked on Automatic redirect to identity provider instead, and it was blank. I re-entered our login page information and all seems to be working.

I reached out to Docebo’s Help Desk and explained the whole experience. I was told that there had been an expiration date set on our SAML setup (???!!!???) which had expired. He removed the expiration date and assured me this should not happen again nor affect our Extended Enterprise domains with SAML SSO.

I’m still left wondering why is there an expiration date in the first place, who set it, and does this happen fairly regularly, or was it just an oops on the part of someone who turned on SAML SSO for us over the past year? Have any of you run into this before?

Never had this happen thankfully...very odd indeed.


I had something similar happen twice on the day we rolled over to our new contract the past two years. The first time support was pointing a finger at a super admin even though I knew that was not the case. The second time I had receipts from the first time and they eventually figure out ours was also scheduled to turn off/expire each year. They supposedly removed it so hopefully things will remain quiet this year. 

 

I have no Idea why there is a disruptive/nuclear date field on their end that we cannot see or modify ourselves. I am also clueless as to why someone on their end is entering a date in the first place. 


Thanks for the heads up, I’m just about to check with our account manager now to ensure that field is well and truly empty (or set for a date after I retire in 2042). 


This is the image the Help Desk agent sent me, indicating the date it was presumably set up and the expiration date approximately 1 year later. The second image shows that he removed the expiration date.
 

 


Reply