SAML Response Invalid - MultiSSO

[saloniahuja]

On our dev instance(Istanbul) , we have enabled MultiSSO plugin

Configured IDP by importing XML

But, we are getting to logout page after login.

How can I debug this? Can someone help please ? Thanks in advance.

Saloni

[faisal_dadabhoy]

There could be multiple reasons.

Did you attempt to turn on debugging on SAML properties? You may see something in logs that may tell you what the issue is.

[saloniahuja]

sorry couldn't find this page. I think you are referring to SAML2 Plugin, we are on Multi-SSO Plugin.

Thanks

[vab_13 · Accepted solution]

Most likely SAML Response is evaluated being invalid and you are getting to the logout page.

Enable Multi-SSO Debug.

This debug will start printing logs along with actual SAML Response XML.

The logs will confirm on why SAML Response is being invalided. If you configured by importing XML from IDP, make sure there is no trailing forward slash "/".

Validate certificate.

From Multi-SSO Properties, enable Debug:

Multiple Provider Single Sign-On - ServiceNow Wiki

This will start printing debug information.

This debug information is pretty descriptive to confirm on why SAML Response

You can leverage script from my article to see if there is a Certificate issue:

If you still run into issues, reply back with your instance name or log a call in Hi: we can assist.

Vab

[vab_13]