KB Article #181721

SSO: Restoring access to the Admin UI when locked out of the SSO

Problem

During the configuration/testing of SSO for Administrators or due to issues with the SSO itself, sometimes one could be locked out of the Administrator tool. In that case, it would be useful to know how to go around the SSO and reach the Administrator tool directly.


Resolution

In case you are locked out of the Admin UI, below are the steps you can take in order to regain it and finish up with the SSO configuration.


Use modified URL

Try accessing the Admin UI like this:


https://SERVER_ADDRESS:ADMIN_PORT?idp=ST_IDP


where we must substitute for the correct server address and admin port.



Temporarily disabling the SSO for Administrators


Stop all ST services executing stop_all


Navigate to <FILEDRIVEHOME>/conf


Edit the options-overwrite.conf file and add the below lines at the bottom of the file:


LoginSettings.Admin.SSO=disabled


Save the changes and start the database and admin services:


start_db
start_admin


Now you should be able to log in to the Admin UI.


Verify the changes are rolled back.


Comment or remove the lines in <FILEDRIVEHOME>/conf/options-overwrite.conf.


Start the rest of the used ST services.