1783730 - Unable to sso authenticate github profile to get to MOZ repos.

Status: RESOLVED FIXED

(mozilla.org :: Github: Administration, task)

Description

[Nick]

Hi! Followed all the instructions still having a hard time getting to the git repos!

Comment 1

[Chris Knowles [:cknowles]]

OK, you clearly succeeded at one point, as you show as having your SSO identity linked.

Looking at the pre-reqs - I see you have a phonebook account, and I see you as being a member of the ghe_mozilla_users group.
Can you also try going to https://sso.mozilla.com/info and verifying that you see mozilliansorg_ghe_mozilla_users in the list of groups?

Can you fill in some details around what you're seeing? If you're ending up at the https://wiki.mozilla.org/GitHub/SAML_issues page, can you paste the "dbg=XXXX" from the URL?

Comment 2

[Nick]

here's the url!

https://wiki.mozilla.org/GitHub/SAML_issues?dbg=ghgr&state=g6Fo2SBiYnN2U25LUC00RktDU1lGcTkxR1JwSzY4WVcxTnphN6N0aWTZIGszQzZpb3ZhY2V1cDNYTkJkZ09kVGRrVzl1MWhCU0c1o2NpZNkgZjFNcGNUellBOEowNm5VVWRPNUx1aGhBN2I0SlpWSmk

but wow looks like according to this data ( shows i am in the group in mana ) im NOT in that group!

https://sso.mozilla.com/claim/groups
0 "everyone"
1 "vpn_corp"
2 "team_moco"
3 "egencia_us"
4 "vpn_default"
5 "IntranetWiki"
6 "office_remote"
7 "all_ldap_users"
8 "StatsDashboard"
9 "phonebook_access"
10 "team_moco_benefited"
11 "team_moco_ft"
-- end
(In reply to Chris Knowles [:cknowles] from comment #1)

OK, you clearly succeeded at one point, as you show as having your SSO identity linked.

Looking at the pre-reqs - I see you have a phonebook account, and I see you as being a member of the ghe_mozilla_users group.
Can you also try going to https://sso.mozilla.com/info and verifying that you see mozilliansorg_ghe_mozilla_users in the list of groups?

Can you fill in some details around what you're seeing? If you're ending up at the https://wiki.mozilla.org/GitHub/SAML_issues page, can you paste the "dbg=XXXX" from the URL?

Comment 3

[Chris Knowles [:cknowles]]

yeah, the "dbg=ghgr" says for some reason you're not in that group, though all the UI things say you are.

I've removed you and readded you - please process that invite, and then logout/back into sso - (the last step here: https://wiki.mozilla.org/GitHub/GHE_SAML_User_FAQ#Belonging_to_the_correct_group_in_people.m.o ) and then try things again.

Thanks.

Comment 4

[Nick]

(In reply to Chris Knowles [:cknowles] from comment #3)

yeah, the "dbg=ghgr" says for some reason you're not in that group, though all the UI things say you are.

I've removed you and readded you - please process that invite, and then logout/back into sso - (the last step here: https://wiki.mozilla.org/GitHub/GHE_SAML_User_FAQ#Belonging_to_the_correct_group_in_people.m.o ) and then try things again.

Thanks.

That works I'm in , thank you!

Comment 5

[Chris Knowles [:cknowles]]

Great! I'll ask the IAM people to look at why that may have occurred, but glad you're back in.