The Hyland IdP Server Fails to Authenticate When Using a Proxy - Identity and Access Management Services - 3.1 - 3.1 - Other - external

Identity and Access Management Services

Platform
Other
Product
Identity and Access Management Services
Release
3.1
License

When using a proxy for HTTP communications, authentication can sometimes fail with a 500 error (user name or password invalid) when users attempt to log in with valid credentials. This typically occurs in OnBase environments and is due to the way HTTP communications are passed through the Hyland SCIM server to the user catalog.

By default, the Hyland IdP server uses the proxy behavior defined by .NET Core. This behavior can be changed to always bypass the proxy, or to use Microsoft Internet Explorer settings to define the URLs that bypass the proxy.

Ensure that the SCIM Proxy Settings field (if setting up the Hyland IdP server using the initialization page) or the --scimclientsettingsproxy command line switch (if setting up the Hyland IdP server from the command line) are configured correctly according to your environment. See the following sections for steps on how to configure these settings: