topic Workaround for Ansible cert auth with SAML enabled in Software Development Kit (SDK) and API Discussions

Workaround for Ansible cert auth with SAML enabled

edannen — Wed, 04 Jun 2025 09:54:41 GMT

Hello,

Does anyone have workaround for certificate authentication with SAML enabled on a cluster?

This is for AWX Tower, which is failing at ADFS auth when running a playbook against a SAML enabled cluster.

A curl command to the cluster usign the certificates works fine, error occurs when AWX tried to access API of the SAML enabled cluster.

Thanks!

Re: Workaround for Ansible cert auth with SAML enabled

Ontapforrum — Wed, 07 Dec 2022 09:12:58 GMT

I don't know about the workaround but looks like SAML enabled ONTAP Cluster and Ansible don't work together.

Is ONTAP SAML compatible with Ansible for ONTAP 9?
No, Ansible does not work with ONTAP SAML.
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Is_ONTAP_SAML_compatible_with_Ansible_for_ONTAP_9

Re: Workaround for Ansible cert auth with SAML enabled

edannen — Wed, 07 Dec 2022 19:38:12 GMT

Thanks for the reply...I shoudl have been more clear, the local account on the cluster is setup for cert authentication only (no SAML, etc). The issue is when AWX attempt so access the API, it redirects to ADFS and errors out.

Re: Workaround for Ansible cert auth with SAML enabled

edannen — Fri, 16 Dec 2022 19:55:43 GMT

This issue is due to certificate chain issues. We are working with Netapp support to fix them.