Question about Onelogin and FQDN "www.msftconnecttest.com"

Question

<background>

・We accessed to Onelogin(https://www.onelogin.com/jp-ja) via browser IE on Windows10 PC.

・After SSO authentication via Onelogin, we accessed to ASP(Application Service Provider).
But the ID/password of login-form on ASP was not inputted automatically.

・On our research, if we use the ver3.2.0 of extension function for Onelogin on IE, the above phenomenon happened.
(If we used the latest version ver3.3.8 of extension function for Onelogin, this phenomenon didn't happened.

・But this phenomenon suddenly happened. (until now, we could access correctly with ver3.2.0.)
　※the extension function could be downloaded from the following link.（https://www.pentio.com/onelogin/support/extension/#ie）

・we found the TCP_DENIED error from proxy logs.

・"[04/Mar/2022: 08:44:52 +0900]" 3 xxx.xxx.xxx.xxx 403 TCP_DENIED 780 141 GET http www.msftconnecttest.com 80 /connecttest.txt - - - - - - "Microsoft NCSI" PROXIED "none" - xxx.xxx.xxx.xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

<question>

・we don't know why this phenomenon happened. Is there anyone to know the cause of this phenomenon?

Answer 1

Hi @tj3452

Check the same plugin version (ver3.2.0 of extension ) that you used for logging to Onelogin from other browsers like chrome and check if this error is browser-related or the Plugins that are causing these issues.

As you have already stated that certain version of the same plugin is not causing these issues then the best way to troubleshoot this would be to contact the One login related to the Single sign-on (SSO) and they might take this up and sort this out.

Hope this resolves your Query!!

--
--If the reply is helpful, please Upvote and Accept it as an answer–