Skip to main content

Users Unable to Complete MFA Enrollment with SAML SSO

Description

When a site uses a custom login page that redirects users to SAML SSO, users enrolling in Multi-Factor Authentication. could receive a 500 error.

Steps to Replicate

  1. Login to Blackboard Learn as administrator

  2. Open System Admin > Authentication

  3. Open the Default authentication provider and select Edit

  4. Confirm Multi-Factor Authentication is set to Active, then select Submit

  5. Open System Admin > Users

  6. Create a test user who has not previously enrolled in MFA and assign a known password

  7. Confirm the site uses a custom login page that redirects users to the institution’s SAML SSO provider

  8. Keep the administrator session open for cleanup

  9. Open a new private or incognito browser window

  10. Open the default Blackboard Learn login page

  11. Enter the test user’s username and password and select Sign In

  12. Observe the result during MFA enrolment

Observed Behavior:

The MFA enrolment page does not appear. Instead, the login request returns an error stating:“Cannot call sendRedirect() after the response has been committed.”

Expected Behvaior:

The MFA enrolment page appears and displays a QR code. The user can register an authenticator app, enter a valid six-digit code, and access Blackboard Learn.

Affected Versions

  • Learn 4000.17.0

  • Learn 4000.21.0

  • Learn 4001.0.0

Target Release

SaaS Fixed (4001.2.0)

Did this answer your question?