Troubleshooting Apigee SSO on the Private Cloud

Port verification

If the installation or configuration process fails, you should first ensure that all necessary ports are open and accessible:

The apigee-openldap node must be able to access the Postgres node on port 5432.
Port 9099 on the apigee-openldap node must be open for external HTTP access by the Edge Management UI and the SAML IDP. If you configure TLS on the Apigee SSO, the port number might be different.
The apigee-openldap node must be able to access the SAML IDP at the URL specified in your configuration.
The apigee-openldap node must be able to access port 8080 on the Management Server node.

Re-run configuration

If all necessary ports are open and accessible, you can rerun the configuration steps:

For the Apigee SSO:

/opt/apigee/apigee-service/bin/apigee-service apigee-openldap setup-sso -f /opt/silent.conf

For the Edge Management UI:

/opt/apigee/apigee-service/bin/apigee-service edge-management-ui configure-sso -f /opt/silent.conf

Reset the Apigee SSO database

If reconfiguration does not work, you can delete the Postgres database used by the Apigee SSO, and then reconfigure the Apigee SSO and the Edge Management UI:

Stop the Apigee SSO:

/opt/apigee/apigee-service/bin/apigee-service apigee-openldap stop_sso

Log in to the Postgres node and drop the apigee_dex database:
```
psql -U postgres_username -p postgres_port -h postgres_host -c "drop database \"apigee_dex\""
```
where:
- postgres_username is the Postgres username you specified when you installed Edge. The default value is apigee.
- postgres_port is the Postgres port you specified when you installed Edge. The default value is 5432.
- postgres_host is the IP or DNS name of the Postgres node.
Rerun the steps in Install and configure the Apigee SSO.