On Tuesday, November 19, 2024, from approximately 12:48 p.m. to 1:22 p.m. (UTC), some customers were unable to log into the KSAT console using SAML single sign-on (SSO).

This issue was caused by an update that added code to validate the expiration date of SAML single sign-on (SSO) certificates sent during login from the user’s identity provider (IdP). Some IdP certificate expiration dates did not pass this validation and the user’s login was blocked as a result. To resolve this issue, we rolled back this update to allow those certificates to be used to process the SSO in the SAML authentication so that users could log in. The KSAT console returned to normal performance by 1:22 p.m. (UTC).

To prevent this type of issue in the future, we are implementing this additional certificate validation as an optional opt-in feature in a future update.

No data loss occurred as a result of this issue.