Troubleshooting SAML

If the SAML configuration is changed (and the changes are activated), a restart of the IAM instance may be necessary.

To do so, see for example Starting and stopping Airlock IAM (system service integration).

Some exceptions you might see:

14.6.1. AuthnContext doesn't match RequestedAuthnContext

14.6.2. Missing default AssertionConsumerService in SP metadata

14.6.3. SLO exception in debug mode

14.6.4. AuthnRequest for an unknown target application

14.6.5. Entity IDs do not match

14.6.6. SLO not working in SP

14.6.7. Host flag not set or using withouth FQDN

14.6.8. MetaAlias missing or entity IDs do not match

14.6.9. NullPointerException processing SAML assertion in SP

14.6.10. Mismatch in CoT list definition

14.6.11. IDP entity ID not found in SP

14.6.12. Unsupported SAML signature algorithms in IAM 7.6 and later