Issue:
When logging into Control Hub cloud and your organization has SAML enabled, you are met with an error page and Login Audit gives DPM_SAMUEL_002 error.
Solution:
Sometimes the error page will not load correctly and display the HTML code instead, or even download the code. A generic error is given for security reasons, but you can find the error in the Login Audit in Control Hub. StreamSets Support does not have access to this information, but a Control Hub Administrator from your organization can check the Login Audit by clicking Administration > Login Audit in the Navigation panel. Select one of the failed logins to view the details about the failure. A Login Audit failure may look like the following:
HTTP statusCode: 400, Details: WebSsoException: DPM_SAMUEL_002 - Expected IdP user ‘philip.vick@streamsets.com’ but got ‘Philip.Vick@streamsets.com’. Authentication for DPM user ‘philip.vick@streamsets.com’ rejected
When SAML is enabled for your organization, the User ID that you enter must match the SAML User Name in your profile, which may or may not be the same as your Control Hub User ID, and may or may not be the same as your SAML identity provider (IdP) user name. The User ID is Case Sensitive when SAML is enabled for your organization.
In this case, the SAML user name originally put into the Control Hub login page should be all lowercase.
If you are a Control Hub Administrator, you can use your Control Hub credentials to log into the following page to re-enable access to Control Hub:
https://cloud.streamsets.com/security/dpmlogin
