SSO Changing Group Names Breaks PDP

jwilson

Has anyone else noticed Domo SSO changing Group names when users authenticate?

We have an AD Group named "SP_Webster" for example and Domo is now adding it to users as "SP_Webster1".

This started for us yesterday and it is breaking ALL of our PDP-enabled cards.

Domo Groups.png

AD Groups.png

pdp error.png

Find more posts tagged with

Comments

Chronos

Is anyone able to help out with this request?

jwilson

We "fixed" the issue with Domo by reverting our OU name change. Not ideal as we made that change in the first place for a reason.

This did clear up the issues with PDP but the larger issue remains that using Domo and PDP basically freezes your OU structure forever.

Smu

When you made the changes to your OU within active directory, did you disable your SSO within Domo, make the change, then re-enable it? Or did you just make the change within AD itself and leave the Domo configuration alone?

jwilson

To be clear, the magnitude of our change was simply changing the name of a folder in AD that contained Groups used in Domo SSO. The name change resulted in the full DN of the group changing (because a parent OU changed).

From that point forward, Domo read the group names of the groups under the re-named folder as if they were duplicates of the same groups before the parent folder's name was changed.

We made this change on our AD without doing anything to Domo's SSO configuration.

I'm not sure disabling SSO on the Domo side would have positively affected the situation.

If Domo had a way for us to wipe out all existing groups from the Domo side so they would be re-built as SSO users logged in, that would have solved / prevented the issue we encountered.

Smu

If Domo had a way for us to wipe out all existing groups from the Domo side so they would be re-built as SSO users logged in, that would have solved / prevented the issue we encountered.

Thanks for the clarification. You can request product enhancements like this directly to the product team here at Domo if you would like. There are two spots to do this. The first is in the Ideas Exchange thread in the Dojo (you can find a link to it on the Dojo home page). The second is inside Domo itself in the product feedback menu (you can find it in the list of options within the 'dice' menu). Feel free to submit it in both places as well.

Thanks,

-Richard