Difference between revisions of "SAML Role attribute"
Jump to navigation
Jump to search
| Line 5: | Line 5: | ||
The attribute must contain one or more <code>[[AttributeValue]]</code> elements, each containing a comma-separated pair of strings: | The attribute must contain one or more <code>[[AttributeValue]]</code> elements, each containing a comma-separated pair of strings: | ||
| − | * The [[ARN]] of a role that the user can be mapped to | + | * The [[ARN]] of a [[role]] that the user can be mapped to |
* The [[ARN]] of the [[SAML provider]] | * The [[ARN]] of the [[SAML provider]] | ||
Revision as of 19:16, 2 November 2021
Your request included an invalid saml response
This error can occur when the SAML response from the identity provider does not include an attribute with the Name set to
https://aws.amazon.com/SAML/Attributes/Role
The attribute must contain one or more AttributeValue elements, each containing a comma-separated pair of strings:
* The ARN of a role that the user can be mapped to
* The ARN of the SAML provider
For more information, see Configuring SAML assertions for the authentication response. To view the SAML response in your browser, follow the
steps listed in How to view a SAML response in your browser for troubleshooting.
See also
Advertising:
