posting here from SF group. I am in process of testing and deploying new DUO / Netscaler oauth integration and running into a bizarre issue. Single SF server, Netscaler 14.1, DUO oauth. Randomly getting "Cannot complete your request" and on SF seeing errors 1, 7, and 10. The issue is super random and affects all browsers and regular and private modes seemingly randomly. Anyone seen anything similar?

We had to capture the credentials with a loginschema on the LDAP to customer positions, and use a traffic policy on the Gateway to guarantee them.

@Jeff Riechers can you PLEASE 🙏 share some details on how you guys did that? I have been beating my head against the wall for several days trying various things.

Sure, working on a full write up, but here is the high level. Create a login schema that gets bound to the AAA vserver if LDAP is the first policy. Modify the single auth schema with the following setting

ok cool, I did try the with and without schema (issue with schema was it looked a bit off) but I have not tried the traffic policy. Just to clarify, the traffic policy is assigned to auth server or the gateway?

Traffic policy goes on the gateway.

Thank you @Jeff Riechers. I will give it a bit and let you know.

Always eager to help out a fellow nerd.

if you have a blog I can link back my forum post to it.