Troubleshooting: SAML SP-Initiated Realm Shows "Error on MultiDomainRelayState"

Follow
    Applies to:
  • SecureAuth Identity Platform
Deployment model:
  • Cloud
  • Hybrid
  • On Premises
  • Version Affected: All
     
     

    Overview

    When configuring a SAML SP-initiated realm, after entering a username and password, the user receives the following error:

    Error on MultiDomainRelayState: Object reference not set to an instance of an object.

     

    Cause

    The service provider (SP) is not providing an Assertion Consumer Service (ACS) URL, so the Identity Provider (IdP) POSTs back to itself in a loop.

     

    Resolution:

    To resolve this, set the SAML Consumer URL on the Post Authentication tab of the SAML realm being configured, as shown below.

    SAML Assertion / WS Federation section of the Post Authentication tab, with the SAML Consumer URL field highlighted.




    SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

    Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.

    0 out of 0 found this helpful

    Comments

    0 comments

    Please sign in to leave a comment.