Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Venkateshwar Mallepally (Venkateshwar Reddy M)
Virtusa
Venkateshwar Mallepally
Virtusa
US
Venkateshwar Reddy M Member since 2019 8 posts
Virtusa
Posted: Jul 8, 2019
Last activity: Jul 30, 2019
Posted: 8 Jul 2019 23:07 EDT
Last activity: 30 Jul 2019 12:15 EDT
Closed

SAML Encrypted Response does not work -- Pega 8.2.1

Hi,

We are trying to use SAML 2.0 authentication and the IDP is sending encrypted response. Getting error as

RelayStateID - Failed while executing the SAML auth flow.
com.pega.pegarules.pub.PRRuntimeException: No value specified for Attribute in SAML assertion
at com.pega.pegarules.integration.engine.internal.auth.saml.SAMLResponseHandler.handleSAMLResponse(SAMLResponseHandler.java:142) ~[printegrint.jar:?]

Attached the configuration and logs to this post.

Any help is appreciated.

Regards,

Venkat

To see attachments, please log in.
Data Integration

  • Mukesh Murali
Posted: 5 years ago
Posted: 9 Jul 2019 21:38 EDT
Venkateshwar Mallepally (Venkateshwar Reddy M)
Virtusa
Venkateshwar Mallepally
Virtusa
US

I have given my Operator ID configuration in attached file and i see in the clipboard that value is available but still operator is not getting created and portal is not being launched.

To see attachments, please log in.
Posted: 5 years ago
Posted: 30 Jul 2019 12:15 EDT
Chad Ellinger (CELLINGER)
Perficient
Director
Perficient
US

Can you use an extension like SAML Trace to determine what XML is coming back to the AssertionConsumerService from the identity provider? I suspect that your OperatorID mapping is incorrect; I believe it should just map an attribute name in the XML (e.g. "NameID", "cn", or something similar) versus a full clipboard page reference.
 

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice