Troubleshooting: ExtendedSAMLAttrValueComboBox SelectedValue Invalid Error After Deleting a Mapped Custom Property – SecureAuth Support

Version Affected: All

Overview

A realm shows a generic "An error in the authentication has occurred. Please Try Again. If the error persists, please contact your Administrator" message after mapping an Extended SAML Attribute to a custom property on the Post Auth tab. With Custom Errors turned off on the Admin Realm, the underlying error is: System.ArgumentOutOfRangeException: 'ExtendedSAMLAttrValueComboBox' has a SelectedValue which is invalid because it does not exist in the list of items. Parameter name: value.

ASP.NET yellow error page titled Server Error in /SecureAuth0 Application, showing the ArgumentOutOfRangeException for ExtendedSAMLAttrValueComboBox and its full stack trace.

This level of detail is only visible with Custom Errors turned off on the Admin Realm — with Custom Errors on, a realm only shows the generic message shown above.

Cause

This happens when a custom property that was previously mapped to an Extended SAML Attribute on the Post Auth tab is later deleted from the Profile Fields section of the Data tab. That Extended SAML Attribute's mapping in web.config still points at a property that no longer exists — this can happen for any Extended SAML Attribute, not just the one shown below.

In this example, a custom property named Street Name was added under Profile Fields on the Data tab and mapped to Extended SAML Attribute 1 on the Post Auth tab.

Profile Fields row for a custom property named Street Name, showing its provider, value field, format, and a Delete button.

The Street Name property was later deleted from the Data tab, but the Post Auth tab's mapping to it was not.

Resolution

Decrypt web.config using the Admin Console.
Find the ExtendedSAMLAttr1Value key and clear its value. The ExtendedSAMLAttr1Name value can be cleared as well.

web.config excerpt showing the ExtendedSAMLAttr1Name, ExtendedSAMLAttr1Format, ExtendedSAMLAttr1Value, and ExtendedSAMLAttr1FilteredGroup keys, with the stale Street Name value highlighted.

Save the changes.

Extended SAML Attribute 1 is now available to map to a different property.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.