Overview

Some users may experience an issue where Single Sign-On (SSO) login fails outside of InPrivate mode in the Edge browser. This problem typically occurs when trying to log into a site after updating IP Metadata so that SSO goes through Microsoft Entra ID instead of internal ADFS. The issue may initially seem related to corrupted browser cookies and caches, but could also be associated with the Max Authentication Age settings in the SSO configuration.

Solution

To resolve this issue, follow these steps:

1. Navigate to Admin Console People Settings Single Sign-on SAML.
2. Adjust the Max Authentication Age setting to match the value setup on the Identity Provider (IdP) side. The default setting for this parameter is 28800 seconds, equivalent to 8 hours on the JIVE side.
3. Clear the browser data completely and verify again.
4. If the issue persists, request the support team to clear the caches on the application.
5. Validate the changes by testing the login process.

Summary

SSO login failure in the Edge browser outside of InPrivate mode can be resolved by adjusting the Max Authentication Age setting in the SSO configuration and clearing the browser and application cache. It's generally advisable to keep the Max Authentication Age value synchronized with the corresponding attribute on your Identity Provider side.

FAQ

1. What is the Max Authentication Age setting in SSO configuration?
   It is a parameter that determines the maximum time a user can remain authenticated without re-authenticating. The default setting for this parameter is 28800 seconds, equivalent to 8 hours on the JIVE side.
2. What if adjusting the Max Authentication Age setting doesn't resolve the issue?
   If the issue persists after adjusting the Max Authentication Age setting and clearing the browser data, you should request the support team to clear the caches on the application.
3. Does this issue affect all users?
   Not necessarily. If the issue affects only a subset of users in normal browser tabs, it may be associated with local browser data for certain users.