SAML Request is in the URL but received "Error: Failed to receive authentication request by HTTP redirect"

Version Affected:  All

Description:  

Error: Failed to receive authentication request by HTTP redirect

and

Error: at ComponentSpace.SAML2.Utility.XmlSignature.GetSignatureElement(XmlElement xmlElement) at MFC.WebApp.SecureAuth.SAML20SPInit.ReceiveAuthnRequest(AuthnRequest& authnRequest, String& relaystate)

Cause:  

Malformed SAML Request that may include Signature that needs to be validated

Resolution:  

1. Make sure that SAML is readable through SAML Tracer. If there is no "SAML" in orange next to the URL that includes the SAML Request, it is no good.

2. If there is encoding involved on the SP side, try removing that to see if that is needed.

3. Ask the SP if they are doing anything anything else to the SAML Request and start removing everything one by one as a test.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.