Workaround for Ansible cert auth with SAML enabled

[edannen]

Hello,

Does anyone have workaround for certificate authentication with SAML enabled on a cluster?

This is for AWX Tower, which is failing at ADFS auth when running a playbook against a SAML enabled cluster.

A curl command to the cluster usign the certificates works fine, error occurs when AWX tried to access API of the SAML enabled cluster.

Thanks!

[Ontapforrum]

I don't know about the workaround but looks like SAML enabled ONTAP Cluster and Ansible don't work together.

Is ONTAP SAML compatible with Ansible for ONTAP 9?
No, Ansible does not work with ONTAP SAML.
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Is_ONTAP_SAML_compatible_with_Ansible_for_ONTAP_9

[edannen]

Thanks for the reply...I shoudl have been more clear, the local account on the cluster is setup for cert authentication only (no SAML, etc). The issue is when AWX attempt so access the API, it redirects to ADFS and errors out. 

[edannen · Accepted solution]

This issue is due to certificate chain issues. We are working with Netapp support to fix them.