Hello,

We are attempting to setup SSO with Pega Platform 8.1.2 using SAML 2.0 and getting a 500 response back. The error show in the log file is below. Any help would be appreciated.

.pega.pegarules.pub.PRRuntimeError: PRRuntimeError 
	at com.pega.pegarules.session.internal.mgmt.base.ThreadRunner.runActivitiesAlt(ThreadRunner.java:713) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.internal.mgmt.PRThreadImpl.runActivitiesAlt(PRThreadImpl.java:489) ~[prprivate.jar:?] 
	at com.pega.pegarules.integration.engine.internal.RuleExecutionUtils.runServiceActivity(RuleExecutionUtils.java:436) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.services.ServiceAPI.runActivities(ServiceAPI.java:1928) ~[printegrint.jar:?] 
	at com.pega.pegarules.session.external.engineinterface.service.EngineAPI.processRequestInner(EngineAPI.java:435) ~[prenginext.jar:?] 
	at sun.reflect.GeneratedMethodAccessor95.invoke(Unknown Source) ~[?:?] 
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_201] 
	at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_201] 
	at com.pega.pegarules.session.internal.PRSessionProviderImpl.performTargetActionWithLock(PRSessionProviderImpl.java:1377) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.internal.PRSessionProviderImpl.doWithRequestorLocked(PRSessionProviderImpl.java:1109) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.internal.PRSessionProviderImpl.doWithRequestorLocked(PRSessionProviderImpl.java:963) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.external.engineinterface.service.EngineAPI.processRequest(EngineAPI.java:361) ~[prenginext.jar:?] 
	at com.pega.pegarules.integration.engine.internal.services.StatelessServiceAPI.processRequest(StatelessServiceAPI.java:51) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.services.http.HTTPService.invoke(HTTPService.java:534) ~[printegrint.jar:?] 
	at com.pega.pegarules.session.internal.engineinterface.etier.impl.EngineImpl._invokeEngine_privact(EngineImpl.java:331) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.internal.engineinterface.etier.impl.EngineImpl.invokeEngine(EngineImpl.java:274) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.internal.engineinterface.etier.impl.EngineImpl.invokeEngine(EngineImpl.java:251) ~[prprivate.jar:?] 
	at com.pega.pegarules.priv.context.JNDIEnvironment.invokeEngineInner(JNDIEnvironment.java:275) ~[prpublic.jar:?] 
	at com.pega.pegarules.priv.context.JNDIEnvironment.invokeEngine(JNDIEnvironment.java:220) ~[prpublic.jar:?] 
	at com.pega.pegarules.web.impl.WebStandardImpl.makeEtierRequest(WebStandardImpl.java:712) ~[prwebj2ee.jar:?] 
	at com.pega.pegarules.web.impl.WebStandardImpl.doPost(WebStandardImpl.java:398) ~[prwebj2ee.jar:?] 
	at sun.reflect.GeneratedMethodAccessor94.invoke(Unknown Source) ~[?:?] 
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_201] 
	at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_201] 
	at com.pega.pegarules.internal.bootstrap.PRBootstrap.invokeMethod(PRBootstrap.java:370) ~[prbootstrap-8.1.2-340.jar:8.1.2-340] 
	at com.pega.pegarules.internal.bootstrap.PRBootstrap.invokeMethodPropagatingThrowable(PRBootstrap.java:411) ~[prbootstrap-8.1.2-340.jar:8.1.2-340] 
	at com.pega.pegarules.boot.internal.extbridge.AppServerBridgeToPega.invokeMethodPropagatingThrowable(AppServerBridgeToPega.java:224) ~[prbootstrap-api-8.1.2-340.jar:8.1.2-340] 
	at com.pega.pegarules.boot.internal.extbridge.AppServerBridgeToPega.invokeMethod(AppServerBridgeToPega.java:273) ~[prbootstrap-api-8.1.2-340.jar:8.1.2-340] 
	at com.pega.pegarules.internal.web.servlet.WebStandardBoot.doPost(WebStandardBoot.java:129) ~[prbootstrap-api-8.1.2-340.jar:8.1.2-340] 
	at com.pega.pegarules.internal.web.servlet.WebStandardBoot.doGet(WebStandardBoot.java:100) ~[prbootstrap-api-8.1.2-340.jar:8.1.2-340] 
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:634) ~[servlet-api.jar:?] 
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:741) ~[servlet-api.jar:?] 
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.14] 
	at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) ~[tomcat-websocket.jar:9.0.14] 
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:490) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:668) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) ~[catalina.jar:9.0.14] 
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) ~[catalina.jar:9.0.14] 
	at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408) ~[tomcat-coyote.jar:9.0.14] 
	at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) ~[tomcat-coyote.jar:9.0.14] 
	at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:834) ~[tomcat-coyote.jar:9.0.14] 
	at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1417) ~[tomcat-coyote.jar:9.0.14] 
	at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) ~[tomcat-coyote.jar:9.0.14] 
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_201] 
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_201] 
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) ~[tomcat-util.jar:9.0.14] 
	at java.lang.Thread.run(Thread.java:748) [?:1.8.0_201] 
Caused by: com.pega.pegarules.pub.PRRuntimeException: Error while executing SAML SSO flow : String index out of range: -1 
	at com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ACSHandler.handleException(SAMLv2ACSHandler.java:122) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ACSHandler.executePostBindingFlow(SAMLv2ACSHandler.java:437) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ACSHandler.processSAMLResponse(SAMLv2ACSHandler.java:71) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.util.PRSAMLv2Utils.processSSOResponse(PRSAMLv2Utils.java:151) ~[printegrint.jar:?] 
	at com.pegarules.generated.activity.ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.step1_circum0(ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.java:163) ~[?:?] 
	at com.pegarules.generated.activity.ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.perform(ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.java:73) ~[?:?] 
	at com.pega.pegarules.session.internal.mgmt.Executable.doActivity(Executable.java:3556) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.internal.mgmt.base.ThreadRunner.runActivitiesAlt(ThreadRunner.java:646) ~[prprivate.jar:?] 
	... 53 more 
Caused by: java.lang.StringIndexOutOfBoundsException: String index out of range: -1 
	at java.lang.String.substring(String.java:1967) ~[?:1.8.0_201] 
	at com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ACSHandler.populatePOSTBodyParams(SAMLv2ACSHandler.java:458) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ACSHandler.executePostBindingFlow(SAMLv2ACSHandler.java:368) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ACSHandler.processSAMLResponse(SAMLv2ACSHandler.java:71) ~[printegrint.jar:?] 
	at com.pega.pegarules.integration.engine.internal.util.PRSAMLv2Utils.processSSOResponse(PRSAMLv2Utils.java:151) ~[printegrint.jar:?] 
	at com.pegarules.generated.activity.ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.step1_circum0(ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.java:163) ~[?:?] 
	at com.pegarules.generated.activity.ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.perform(ra_action_pzassertionconsumerservicev2activity_27bebf0082123912a65fccaf5a5fb488.java:73) ~[?:?] 
	at com.pega.pegarules.session.internal.mgmt.Executable.doActivity(Executable.java:3556) ~[prprivate.jar:?] 
	at com.pega.pegarules.session.internal.mgmt.base.ThreadRunner.runActivitiesAlt(ThreadRunner.java:646) ~[prprivate.jar:?]