# Troubleshooting

# IdP redirect URL port 20443

## What

FileWave IdP device-enrollment redirect URLs use port 20443 for the device redirect endpoint. Older IdP configurations may still have that redirect URL on port 443 or may omit the port.

## When/Why

This changed in FileWave 15.5.1 to support environments where clients enroll through IdP but port 443 is not exposed for that redirect. If your IdP setup was created before that change, check the redirect URLs stored in your IdP.

## How

Review the IdP setup article for your provider, then check the third redirect URL. It should use port 20443 for current FileWave configurations.

FileWave 15.5.1 and newer use this URL format for the device redirect:

**<span>https://FWXSERVER:20443/auth/login\_via\_idp\_redirect\_for\_device </span>**

<span>FileWave configurations created before 15.5.1 may have used the same URL without a port, or with port 443:</span>

**<span>https://FWXSERVER:443/auth/login\_via\_idp\_redirect\_for\_device </span>**

<span>To confirm the correct values for your server, repeat the IdP setup step where FileWave Anywhere shows the URLs to copy. The other two redirect URLs remain on port 443.</span>

## Related Content

- [IdP Setup: Google](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-google "IdP Setup: Google")
- [IdP Setup: Keycloak](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-keycloak "IdP Setup: Keycloak")
- [IdP Setup: Okta](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-okta "IdP Setup: Okta")
- [IdP Setup: Microsoft Entra ID (Azure)](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-microsoft-entra-id-azure "IdP Setup: Microsoft Entra ID (Azure)")

# Why Apple Device Enrollment Prompts for an IdP Login

## Why the login prompt appears

An identity-provider login prompt during macOS, iOS, or iPadOS enrollment is expected when the FileWave IdP configuration has **Enrollment** enabled. The prompt can use Google, Keycloak, Okta, or Microsoft Entra ID, depending on the configured provider.

## What the Enrollment setting controls

The **Enrollment** checkbox tells FileWave to require authentication through that IdP as part of device enrollment.

## Change the setting

In FileWave Anywhere, open **Settings** and edit the IdP configuration. Clear **Enrollment** to stop using that provider for enrollment authentication, or select it to require the login prompt. Save the IdP configuration after changing the setting.

[![Enrollment checkbox in FileWave Anywhere IdP settings](https://kb.filewave.com/uploads/images/gallery/2025-01/scaled-1680-/1KMHfa13AjRiLvFZ-image.png)](https://kb.filewave.com/uploads/images/gallery/2025-01/1KMHfa13AjRiLvFZ-image.png)

## Related content

- [IdP Setup: Google](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-google "IdP Setup: Google")
- [IdP Setup: Keycloak](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-keycloak "IdP Setup: Keycloak")
- [IdP Setup: Okta](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-okta "IdP Setup: Okta")
- [IdP Setup: Microsoft Entra ID (Azure)](https://kb.filewave.com/books/identity-provider-idp-integration/page/idp-setup-microsoft-entra-id-azure "IdP Setup: Microsoft Entra ID (Azure)")