AD SSO suddenly stopped working

Hello Godself ,

Thank you for reaching out to the community, please refer the troubleshoot guide here - https://support.sophos.com/support/s/article/KB-000035211?language=en_US
And may we know the deployment mode ? - https://support.sophos.com/support/s/article/KB-000035057?language=en_US

Hello, Vivek! Thanks for the reply.

I am aware of those links you posted. I read them again just to be sure that I was not missing anything, but no success. As I said, everything was working fine so I dont believe those configurations messed up by themselves (is that even possible?).

I dont know if that helps, but some of those users use firefox for some websurfing and it worked fine too. It is still prompting for credentials, but it doesnt matter if they input. It doesnt work:

2023:01:04-02:20:01 asg220akrk httpproxy[13050]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.16.2.156" dstip="" user="weverton.alves" group="" ad_domain="AKRKPROMOTORA" statuscode="307" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction=" ()" size="0" request="0x281e000" url="">asg220akrk/auth referer="" error="" authtime="2342" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="225070" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0" exceptions=""

After that line, there is a lot of attemps in the log with this:

Hello, Vivek! Thanks for the reply.

I am aware of those links you posted. I read them again just to be sure that I was not missing anything, but no success. As I said, everything was working fine so I dont believe those configurations messed up by themselves (is that even possible?).

I dont know if that helps, but some of those users use firefox for some websurfing and it worked fine too. It is still prompting for credentials, but it doesnt matter if they input. It doesnt work:

2023:01:04-02:20:01 asg220akrk httpproxy[13050]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.16.2.156" dstip="" user="weverton.alves" group="" ad_domain="AKRKPROMOTORA" statuscode="307" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction=" ()" size="0" request="0x281e000" url="">asg220akrk/auth referer="" error="" authtime="2342" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="225070" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0" exceptions=""

After that line, there is a lot of attemps in the log with this:

Hi Godself ,

Good day and hope you are well. 

Unfortunate to hear this concern you are encountering. Thank you for sharing information and all the troubleshooting steps you have done on your end. May we ask if you already created a support ticket for this? If not, we recommend you to create one for this to be further check by an engineer. Then please share the would be generated caseID to me via DM or by replying to this thread. 

Many thanks for your time and patience and Thank you for choosing Sophos.

Cheers,

Are there any updates arround this thread? Because my SSO isn't working any longer too. I could not find any error. Auth is working fine, the sg could prefetch users and groups, server and user test is ok but SSO has emtpy user and group information

also re-joined the ad without any problems - until last week some user from a co-loc with different IP-Range were logged but today they are empty too - any ideas ?

Hi Dennis,

Good day and Thanks for reaching out to Sophos Community and hope you are well.

Was your case also working previously and then after the update to 9.713 SSO faced issues? or it still worked after the update but only faced the issue until last week?

Also, If you have followed the troubleshooting steps above and has no luck fixing. I would be recommending you also to create a support ticket for this to be further check by an engineer. You can also mention all the troubleshooting steps you have performed along with the details of the post. Then please share with us the would be generated caseID  via DM or by replying to this thread. 

Many thanks for your time and patience and thank you for choosing Sophos.

Cheers,