Troubleshooting
- Directory data syncronization between IdP and FW is not supported
- IdP redirect URL port 20443
- Enrolling Apple devices why am I prompted for IdP login?
Directory data syncronization between IdP and FW is not supported
At this time, FileWave IDP integration is limited to only FileWave Admin authentication and Apple device enrollment. Directory data synchronization (and custom fields) between the IdP source and FileWave is not supported at this time, but will be added in a future release. In the meantime, current LDAP(S) synchronization can be used as a stop-gap to achieve the same result.
IdP redirect URL port 20443
What
FileWave IdP device-enrollment redirect URLs use port 20443 for the device redirect endpoint. Older IdP configurations may still have that redirect URL on port 443 or may omit the port.
When/Why
This changed in FileWave 15.5.1 to support environments where clients enroll through IdP but port 443 is not exposed for that redirect. If your IdP setup was created before that change, check the redirect URLs stored in your IdP.
How
Review the IdP setup article for your provider, then check the third redirect URL. It should use port 20443 for current FileWave configurations.
FileWave 15.5.1 and newer use this URL format for the device redirect:
https://FWXSERVER:20443/auth/login_via_idp_redirect_for_device
FileWave configurations created before 15.5.1 may have used the same URL without a port, or with port 443:
https://FWXSERVER:443/auth/login_via_idp_redirect_for_device
To confirm the correct values for your server, repeat the IdP setup step where FileWave Anywhere shows the URLs to copy. The other two redirect URLs remain on port 443.
Related Content
Enrolling Apple devices why am I prompted for IdP login?
What
When I enroll a macOS, iOS or iPadOS device a pop-up shows asking me to login to Google, Keycloak, Okta or Microsoft Entra ID (Azure) and I'm not sure why.
When/Why
This can happen if you setup an IdP in FileWave and enabled the "Enrollment" checkbox.
How
Login to FileWave Anywhere and go to Settings and edit your IdP configuration as seen in the image below. Uncheck Enrollment if you do not want this behavior. Conversely if you want to enable this behavior then go back and check the box.
