SAML Role attribute

Your request included an invalid saml response
This error can occur when the SAML response from the identity provider does not include an attribute with the Name set to 
https://aws.amazon.com/SAML/Attributes/Role
The attribute must contain one or more AttributeValue elements, each containing a comma-separated pair of strings:

* The ARN of a role that the user can be mapped to
* The ARN of the SAML provider

For more information, see Configuring SAML assertions for the authentication response. To view the SAML response in your browser, follow the 
steps listed in How to view a SAML response in your browser for troubleshooting.

• Read: https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_saml.html#troubleshoot_saml_invalid-response

See also

• SAML, IdP, AWS SAML, AWS IAM, AWS SAML endpoint, SAML:EduPersonOrgDN, SAML Role Attribute, assume-role-with-saml