Difference between revisions of "SAML Role attribute"
Jump to navigation
Jump to search
(Created page with " Your request included an invalid saml response == See also == * {{AWS SAML}} Category:AWS") |
|||
| (7 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | [[Your request included an invalid saml response]] | ||
| + | This error can occur when the [[SAML response]] from the identity provider does not include an [[attribute]] with the [[Name]] set to | ||
| + | https://aws.amazon.com/SAML/Attributes/Role | ||
| + | The attribute must contain one or more <code>[[AttributeValue]]</code> elements, each containing a comma-separated pair of strings: | ||
| + | |||
| + | * The [[ARN]] of a [[AWS Roles|role]] that the user can be mapped to | ||
| + | * The [[ARN]] of the [[SAML provider]] | ||
| + | |||
| + | For more information, see [[Configuring SAML assertions]] for the authentication response. To view the SAML response in your browser, follow the | ||
| + | steps listed in How to view a SAML response in your browser for troubleshooting. | ||
| − | + | * Read: https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_saml.html#troubleshoot_saml_invalid-response | |
Latest revision as of 19:03, 4 November 2021
Your request included an invalid saml response
This error can occur when the SAML response from the identity provider does not include an attribute with the Name set to
https://aws.amazon.com/SAML/Attributes/Role
The attribute must contain one or more AttributeValue elements, each containing a comma-separated pair of strings:
* The ARN of a role that the user can be mapped to
* The ARN of the SAML provider
For more information, see Configuring SAML assertions for the authentication response. To view the SAML response in your browser, follow the
steps listed in How to view a SAML response in your browser for troubleshooting.
See also[edit]
Advertising:
