Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You cannot login due to the InResponseTo Check which is faiing.
In the login log file you see this error

Code Block
org.opensaml.common.SAMLException: InResponseToField of the Response doesn't correspond to sent message abcde0123456

...

When the Application generates an AuthnRequest, it stores the ID of this request. The corresponding response from the IdP must have the InResponseTo attribute set to the same ID value, so the application can verify that the Response is meant for the Request that has been sent. The Application removes this ID once it has been processed.

There are some rare cases that can happen that the Application can not match the ID, such as:

  • You have bookmarked the Request to the IdP server. In this case the ID has been removed in a previous login response.
  • The browser sends the Response Twice (e.g. the user clicks on the reload page button)
  • ...

...

Panel
bgColor#fff
  1. Goto SAML Configuration
  2. Goto the SP Tab
  3. Check the checkbutton Disable InToResponse Check

Image Added

Content by Label
showLabelsfalse
max5
spacesSAML
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel = "kb-troubleshooting-article" and type = "page" and space = "SAML"
labelskb-troubleshooting-article

...