Can't login to Station: SSO / 2FA not supported (Duo, OneLogin, Okta, RapidIdentity, Google, etc.)

⚙️in-roadmap

(brian cors) #1

I am trying to use Station with a Google G Suite account that is behind single sign-on and two-factor authentication using DUO. I can enter my username and password through single sign-on at my institution - but the DUO window never appears. The space where the DUO interface is supposed to be is blank, and I cannot proceed to login.


Here’s the detailed report

  • Trigger:
  • Issue: Cannot login with DUO two-factor authentication
  • Explanatory gifs/pictures (we really need that :pray: ):
  • OS version: macOS 10.13.4
  • Station version: 1.11.2

Can't sign into app
No support for OneLogin
RJS error: TypeError: Cannot read property 'Helpers' of undefined
Cannot login to Gmail due to 2-factor verification being enabled
Work Google ID behind OneLogin SSO and 2 Factor Authentication (Using Duo App) - Station does not login
SSO OKTA sign in
Can't sign in with google account behind DUO
Unable to install Okta Browser Plugin
OneLogin authentication issue
#2

I can’t sign in with my work google account which is authenticated with DUO. After entering my account details into the google account page, I am redirected to the DUO page. After entering my details into the DUO page, it just shows a blank page.


Here’s the detailed report

  • Trigger: Sign in bug
  • Issue: Google account sign in with DUO
  • Explanatory gifs/pictures (we really need that :pray: ):
  • OS version: macOS 10.13.4
  • Station version: 1.11.2

(Alexander Muir) #3

Hi I’m trying to set up and test Station at my work.

I wast not able to sign into station with my work email as we use SSO, so I signed in with my personal account.

I have been adding apps to Station- OKTA, I’m able to sign all the way in, but when I clink on anything in there it opens my default browser either safari or chrome.

when I try concur, I get an message to us the SSO URL.

when I try zoom I cannot try SSO and google doesn’t work

when I try atlassian I put in my work email- I then see message briefly that say opening SSO, and then I get the google account window and enter in my work email and I can’t get in.

am I missing something?

I can see a lot of potential in our environment

-Alex


(Alexander Muir) #4

I just tried adding slack and was able to sign in with okta SSO in the app.


(Goutham Ramkumar) #5

Station does not login when Google App account is behind OneLogin and Two Factor Authentication which uses authenticator apps (I use Duo). Get an error.


Here’s the detailed report

  • Trigger:
  • Issue:
  • Explanatory gifs/pictures (we really need that :pray: ):
  • OS version: Mac High Sierra
  • Station version:

(Tony) #6

The issue I’m facing is …

I can’t sign into the app. My company uses DUO for SSO for our google account and the page that usually asks me to pick an authentication option (i.e. SMS, Push Notification, Email) is blank inside of Station.

Any ideas?

28


Here’s the detailed report

  • Trigger: Trying to sign in
  • Issue:
  • Explanatory gifs/pictures (we really need that :pray: ):
  • OS version: MacOS 10.13.3
  • Station version: latest

(James Ratcliffe) #7

I’m trying to use Station with my work Google Apps account. It uses OneLogin to authenticate. After entering my Google email address, the next screen is the OneLogin login. I enter my credentials, click Login and get this error:

RJS error:
TypeError: Cannot read property 'Helpers' of undefined

Then this longer message:

Element.update("otp_form", "\u003Cdiv id='otp_errors'\u003E\u003C/div\u003E\n\u003Cfieldset class='inputs'\u003E\n\u003Col\u003E\n\u003Cli id='description'\u003E\n\u003Cdiv id='otp-label'\u003E\n\u003Cspan\u003EOneLogin Protect\u003C/span\u003E\n\u003C/div\u003E\n\u003Ca class='right-aligned' id='change-otp-device'\u003E\nChange\n\u003C/a\u003E\n\u003Cdiv class='hide' data-otp-ids='413940|515139' id='change-otp-device-select'\u003E\n\u003Cselect data-otp_device=\"413940\" id=\"otp_device_id\" name=\"otp_device_id\"\u003E\u003Coption value=\"413940\" selected=\"selected\"\u003EOneLogin OTP\u003C/option\u003E\n\u003Coption value=\"515139\"\u003EOneLogin OTP 1\u003C/option\u003E\n\u003Coption value=\"555752\"\u003EGoogle Authenticator\u003C/option\u003E\u003C/select\u003E\n\u003C/div\u003E\n\u003C/li\u003E\n\u003Cli id='otp_fields'\u003E\n\n\u003Cdiv class='hide' id='otpapp-manual-fields'\u003E\n\u003Col\u003E\n\u003Cli\u003E\n\u003Clabel for=\"otp_token_1\"\u003ESecurity Code\u003C/label\u003E\n\u003Cinput autocomplete=\"off\" class=\"otp_token_input\" id=\"otp_token_1\" name=\"otp_token_1\" size=\"30\" type=\"text\" /\u003E\n\u003Cdiv class='inline-hints'\u003EEnter a security code from your OneLogin OTP device\u003C/div\u003E\n\u003C/li\u003E\n\u003C/ol\u003E\n\u003C/div\u003E\n\u003Cdiv id='otp_auto_token_waiting_msg_fieldset'\u003E\n\u003Clabel\u003E\u003C/label\u003E\n\u003Cdiv id='otp_auto_token_waiting_msg'\u003E\n\u003Cp\u003E\nWaiting for your OneLogin one-time password...\n\u003C/p\u003E\n\u003Cdiv id='waiting'\u003E\u003C/div\u003E\n\u003Cdiv\u003E\n\u003Cdiv\u003E\nCan't receive push notifications?\n\u003C/div\u003E\n\u003Ca href='#' id='otp_auto_token_manual_msg'\u003E\nClick here to enter OTP manually\n\u003C/a\u003E\n\u003C/div\u003E\n\u003C/div\u003E\n\u003C/div\u003E\n\n\n\u003C/li\u003E\n\u003C/ol\u003E\n\u003C/fieldset\u003E\n\u003Cdiv class='hide' id='otp_fields_all'\u003E\n\u003Cdiv id='otp_field_515139'\u003E\n\u003Cdiv class='hide' id='otpapp-manual-fields'\u003E\n\u003Col\u003E\n\u003Cli\u003E\n\u003Clabel for=\"otp_token_1\"\u003ESecurity Code\u003C/label\u003E\n\u003Cinput autocomplete=\"off\" class=\"otp_token_input\" id=\"\" name=\"\" size=\"30\" type=\"text\" /\u003E\n\u003Cdiv class='inline-hints'\u003EEnter a security code from your OneLogin OTP device\u003C/div\u003E\n\u003C/li\u003E\n\u003C/ol\u003E\n\u003C/div\u003E\n\u003Cdiv id='otp_auto_token_waiting_msg_fieldset'\u003E\n\u003Clabel\u003E\u003C/label\u003E\n\u003Cdiv id='otp_auto_token_waiting_msg'\u003E\n\u003Cp\u003E\nWaiting for your OneLogin one-time password...\n\u003C/p\u003E\n\u003Cdiv id='waiting'\u003E\u003C/div\u003E\n\u003Cdiv\u003E\n\u003Cdiv\u003E\nCan't receive push notifications?\n\u003C/div\u003E\n\u003Ca href='#' id='otp_auto_token_manual_msg'\u003E\nClick here to enter OTP manually\n\u003C/a\u003E\n\u003C/div\u003E\n\u003C/div\u003E\n\u003C/div\u003E\n\n\n\u003C/div\u003E\n\u003Cdiv id='otp_field_555752'\u003E\n\u003Col\u003E\n\u003Cli\u003E\n\u003Clabel for=\"otp_token_1\"\u003ESecurity Code\u003C/label\u003E\n\u003Cinput autocomplete=\"off\" class=\"otp_token_input\" id=\"\" name=\"\" size=\"30\" type=\"text\" /\u003E\n\u003Cdiv class='inline-hints'\u003EEnter a security code from your Google Authenticator device\u003C/div\u003E\n\u003C/li\u003E\n\u003C/ol\u003E\n\n\n\u003C/div\u003E\n\u003C/div\u003E\n\n");
Application.Helpers.OtpCommonFields.initialize();
Application.Helpers.OtpCommonFields.displayLoginBtn();
Application.Helpers.OtpOnelogin.initialize();
Application.Helpers.Spin.initialize();
Element.show("otp_form");
Application.Helpers.OtpCommonFields.focusOnTokenInputField();
Application.Helpers.Login.enableLoginForm();

Here’s the detailed report

  • Trigger: Authenticating my Google account with OneLogin instead of the usual Google password screen.
  • Issue: Error, can’t login.
  • OS version: 10.12.6
  • Station version: 1.0.6

(Niklas Ravnsborg) #8

Hey thanks for your report. I think this will be difficult to reproduce for the developers, but it definitely looks like a bug on the Station side.

Just to be sure, please try this:
Can you login in the same way in the latest Chrome browser? Does this work without problems?
Can you login into your Google account without the use of OneLogin / just with your normal credentials?

Please let the dev team know what works.

Hope this helps :slight_smile:


(James Ratcliffe) #9

Do you mean log into my Google account in the latest Chrome browser? That works fine.
My account is set up so it’s impossible to login without going through OneLogin.


(Niklas Ravnsborg) #10

Ok got it so it’s a Google Apps account with Single Sign On it seems. I don’t know the details of SSO but maybe the station team can look into this.

I can’t reproduce this cause I don’t have OneLogin but maybe I can setup SSO.


#11

Running into the same issue and also using OneLogin.


(Rachel Lee) #12

I have the same issue. Has anyone found a solution?


(Adam) #13

Same issue here, makes the app completely unusable for any work purpose.


#14

I was having trouble with getting workday to load inside station because we use Okta for login. You can’t login to workday from workday if you use okta but clicking the workday link in the okta app opens a browser tab instead. To get around this I opened Okta in Chrome and then copied the link address for the workday sign in from the okta launch page. Then in station, open the page developer tools (View > Developer > Toggle Page Developer Tools) and then under the javascript console I ran window.location = "[Workday link copied from Okta]"; and that signed me in no problem since I was already logged into okta inside Station.

Hopefully someone else finds that helpful.


(Don Yanek) #15

I have a similar issue with my work email. My employer uses additional authentication using RapidIdentity. I can’t get by the login screen. I get a blank screen.


(Asaf Mesika) #16

Same issue here. Once we enabled OneLogin for Google Apps, I can’t login - can’t use Station anymore until you fix it


(Haitao Li) #17

My work email uses OneLogin, and the app is broken on OneLogin two factor auth page.


  • OS version: MacOS Hight Sierra
  • Station version: 1.0.11

25 AM


(Daniel Eversole) #18

The issue I’m facing is:

When I open Okta in station, I have a notification that some of my apps require the Okta browser plugin. When I click the radio button “install plugin”, nothing happens.


Here’s the detailed report

  • Trigger:
  • Issue:
  • Explanatory gifs/pictures (we really need that :pray: ):
    image
  • OS version: 10.13.4
  • Station version: 1.13.1

(jl) #19

I am having exactly the same problem. My workplace uses Duo as 2-factor authentication for G Suite, and now I cannot log into Station on a new workstation. Currently my old workstation is still working, but I have not had to reauthenticate for almost a week so I am worried that next time I have to, Station will cease working for me there, as well.


(Jack Goddu) #20

The issue I’m facing is:
I just downloaded for Mac (version #s at end of this post) and am trying to login with corporate gmail, which depends on using OneLogin ( https://wework.onelogin.com/login ) and I get this code error:

try {
Element.update(“otp_form”, “\u003Cdiv id=‘otp_errors’\u003E\u003C/div\u003E\n\u003Cfieldset class=‘inputs’\u003E\n\u003Col\u003E\n\u003Cli id=‘description’\u003E\n\u003Cdiv id=‘otp-label’\u003E\n\u003Cspan\u003EGoogle Authenticator\u003C/span\u003E\n\u003C/div\u003E\n\u003C/li\u003E\n\u003Cli id=‘otp_fields’\u003E\n\n\u003Col\u003E\n\u003Cli\u003E\n\u003Clabel for=“otp_token_1”\u003ESecurity Code\u003C/label\u003E\n\u003Cinput autocomplete=“off” class=“otp_token_input” id=“otp_token_1” name=“otp_token_1” size=“30” type=“text” /\u003E\n\u003Cdiv class=‘inline-hints’\u003EEnter a security code from your Google Authenticator device\u003C/div\u003E\n\u003C/li\u003E\n\u003C/ol\u003E\n\n\n\u003C/li\u003E\n\u003C/ol\u003E\n\u003C/fieldset\u003E\n\u003Cdiv class=‘hide’ id=‘otp_fields_all’\u003E\n\u003C/div\u003E\n\n”);
Application.Helpers.OtpCommonFields.initialize();
Application.Helpers.OtpCommonFields.displayLoginBtn();
Application.Helpers.OtpOnelogin.initialize();
Application.Helpers.Spin.initialize();
Element.show(“otp_form”);
Application.Helpers.OtpCommonFields.focusOnTokenInputField();
Application.Helpers.Login.enableLoginForm();
} catch (e) { alert(‘RJS error:\n\n’ + e.toString()); alert(‘Element.update(“otp_form”, “\u003Cdiv id=‘otp_errors’\u003E\u003C/div\u003E\n\u003Cfieldset class=‘inputs’\u003E\n\u003Col\u003E\n\u003Cli id=‘description’\u003E\n\u003Cdiv id=‘otp-label’\u003E\n\u003Cspan\u003EGoogle Authenticator\u003C/span\u003E\n\u003C/div\u003E\n\u003C/li\u003E\n\u003Cli id=‘otp_fields’\u003E\n\n\u003Col\u003E\n\u003Cli\u003E\n\u003Clabel for=\“otp_token_1\”\u003ESecurity Code\u003C/label\u003E\n\u003Cinput autocomplete=\“off\” class=\“otp_token_input\” id=\“otp_token_1\” name=\“otp_token_1\” size=\“30\” type=\“text\” /\u003E\n\u003Cdiv class=‘inline-hints’\u003EEnter a security code from your Google Authenticator device\u003C/div\u003E\n\u003C/li\u003E\n\u003C/ol\u003E\n\n\n\u003C/li\u003E\n\u003C/ol\u003E\n\u003C/fieldset\u003E\n\u003Cdiv class=‘hide’ id=‘otp_fields_all’\u003E\n\u003C/div\u003E\n\n”);\nApplication.Helpers.OtpCommonFields.initialize();\nApplication.Helpers.OtpCommonFields.displayLoginBtn();\nApplication.Helpers.OtpOnelogin.initialize();\nApplication.Helpers.Spin.initialize();\nElement.show(“otp_form”);\nApplication.Helpers.OtpCommonFields.focusOnTokenInputField();\nApplication.Helpers.Login.enableLoginForm();’); throw e }


Here’s the detailed report

  • Trigger: trying to login with corporate gmail, which uses OneLogin
  • Issue: receiving an error after submitting OneLogin credentials
  • Explanatory gifs/pictures (we really need that :pray: ): 06%20PM
  • OS version: macOS 10.13.4
  • Station version: version 1.15.1