Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

SAML Authentication Setup - Entra ID

CCraw-1902May 30 2025 — edited May 30 2025

Hi,

I am trying to setup a SAML authentication scheme with Apex on Autonomous Database with an ORDS instance on a VM - basically following this example: https://tm-apex.hashnode.dev/implementing-single-sign-on-for-apex-with-entra-id-and-saml-on-oracle-autonomous-database?source=more_series_bottom_blogs#heading-cross-origin-resource-sharing-with-saml

Everything looks ok - I have provided the metadata to the IDP and it looks from the SAML tracker that my username is coming back - however when the response lands on https://hostname/ords/apex_authentication.saml_callback it just shows the response ie. <samlp:Response ...... on the page but doesn't redirect to the application homepage - it looks like the metdata has https://hostname/ords/apex_authentication.saml_callback set as entityID, SingleLogoutService and AssertionConsumerService which is assume is correct…ORDS has been updated with security.externalSessionTrustedOrigins etc.

No Errors in the logs and no errors raised, At a loss what else to configure or why it won't go past apex_authentication.saml_callback - anyone come across this before?

UPDATE: Did a trace and found a message ‘Could not process SAML2 response - no data found’ emitted from the saml_callback and then a stop apex engine so that would explain whats happening but not why!

Comments
Post Details
Added on May 30 2025
0 comments
130 views