SSO Troubleshooting

This article provides steps to resolve common error messages encountered during the initial integration or use of Single Sign-On on Foundry. Below are the most common error messages you may encounter along with steps to resolve.

Admin Issues

• Cannot Edit SSO ID of my Own User
• SSO ID not visible when Admin edits Users in Customer Portal

Login Errors

• We were not able to log you in
• 400 Bad Request during service provider-initiated SSO
• 404 Page Not Found Error during SP-initiated SSO
• 422 - Error for an Incomplete Profile
• A different user with the email <> already exists
• Current time use earlier than NotBefore Condition
• Invalid SAML Response
• Invalid Signature on SAML Response
• Maximum Querystring Length Error
• New User Asked to Enter Basic Details (Input Fields are Already Filled In)
• New User Asked to Update Profile ( Input Fields are Blank )
• No NameID element found in the assertion of the Response
• Not a valid audience for this Response
• SAML ID provider in the logout request is not configured in the system. .
• SAML ID provider in the request is not configured in the system
• SAML Response StatusMessage of Signature required
• The Assertion of the Response is not signed and the SP requires it
• The SAML assertion could not be decrypted
• The status code of the Response was not Success, was Requester
• The status code of the Response was not Success, was Responder
• User Cannot Be Saved
• User is not assigned to a role for the application
• We are not recognizing the SAMLRequest or SAMLResponse