Troubleshooting SAML

Info

If the SAML configuration is changed (and the changes are activated), a restart of the IAM instance may be necessary.

To do so, see for example Starting and stopping IAM.

Some exceptions you might see:

AuthnContext doesn't match RequestedAuthnContext

Missing default AssertionConsumerService in SP metadata

SLO exception in debug mode

AuthnRequest for an unknown target application

Entity IDs do not match

SLO not working in SP

Host flag not set or using withouth FQDN

MetaAlias missing or entity IDs do not match

NullPointerException processing SAML assertion in SP

Mismatch in CoT list definition

IDP entity ID not found in SP

Unsupported SAML signature algorithms in IAM 7.6 and later