SSO Troubleshooting: Invalid SAML Response
Learn how to troubleshoot the Invalid SAML Response error.
Error
If during SSO, you see an error message saying:Invalid SAML Response. Not match the saml-schema-protocol-2.0.xsd
Explanation
This means the SAML Response is not formatted correctly.Resolution
To troubleshoot this, do the following:- Capture the SAML Response using SAML Tracer or another tool.
- Go to a XML schema validator site like: https://www.freeformatter.com/xml-validator-xsd.html
- Enter the SAML Response in the XML field
- Enter the SAML 2.0 schema XSD from https://docs.oasis-open.org/security/saml/v2.0/saml-schema-assertion-2.0.xsd (“view source” in browser to get the raw text) in the XSD field
- Run the validation check and examine the errors.
- Correct the formatting in the SAML Response based on what the errors highlight.