# \#saml

**URL:** https://community.auth0.com/tag/saml/18.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [What does one do with Invalid SessionIndex/NameID](https://community.auth0.com/t/what-does-one-do-with-invalid-sessionindex-nameid/198981)

<div class="topic-metadata">

**Author:** [@jsoref](https://community.auth0.com/u/jsoref)\
**Replies:** 3\
**Last updated:** [April 29, 2026, 5:09pm UTC](https://community.auth0.com/t/what-does-one-do-with-invalid-sessionindex-nameid/198981 "2026-04-29T17:09:15Z")

</div>

We got an event: { "date": "...", "type": "flo", "description": "Invalid SessionIndex/NameID", "connection\_id": "", "client\_id": "...", "client\_name": "...", "ip": "...", "user\_agent": "Edge 146.0.0 / Wi…

---

## [What does one do with Unsupported response type: ZhAkG qt\_mXRWo](https://community.auth0.com/t/what-does-one-do-with-unsupported-response-type-zhakg-qt-mxrwo/199026)

<div class="topic-metadata">

**Author:** [@jsoref](https://community.auth0.com/u/jsoref)\
**Replies:** 3\
**Last updated:** [April 29, 2026, 4:05pm UTC](https://community.auth0.com/t/what-does-one-do-with-unsupported-response-type-zhakg-qt-mxrwo/199026 "2026-04-29T16:05:09Z")

</div>

We got an event: { "date": "2026-04-15T21:25:00.624Z", "type": "f", "description": "Unsupported response type: ZhAkG qt\_mXRWo", "connection\_id": "", "client\_id": "...", "ip": "...", "user\_agent": "Chrome 1…

---

## [How to set SAML RelayState in Actions?](https://community.auth0.com/t/how-to-set-saml-relaystate-in-actions/121123)

<div class="topic-metadata">

**Author:** [@aliaksei](https://community.auth0.com/u/aliaksei)\
**Replies:** 6\
**Last updated:** [November 11, 2025, 5:18pm UTC](https://community.auth0.com/t/how-to-set-saml-relaystate-in-actions/121123 "2025-11-11T17:18:02Z")

</div>

Hi, I’m migrating from Rules to Action Flows. Now I’m completely stuck with migrating the following Rule code: function (user, context, callback) { // some SAML mapping here //... context.samlConfiguration.Re…

---

## [Linking SAML account and want to require user to enter password before linking](https://community.auth0.com/t/linking-saml-account-and-want-to-require-user-to-enter-password-before-linking/188947)

<div class="topic-metadata">

**Author:** [@jeremybong](https://community.auth0.com/u/jeremybong)\
**Replies:** 3\
**Last updated:** [July 15, 2025, 11:51am UTC](https://community.auth0.com/t/linking-saml-account-and-want-to-require-user-to-enter-password-before-linking/188947 "2025-07-15T11:51:33Z")

</div>

Hello! My team is in the process of migrating to Auth0 and SSO, and I have a question regarding converting previous non-SSO users to SSO users. Here’s our scenario: all our current users are non-SSO users and use their …

---

## [Getting started with Okta/Auth0 to integrate third party IDP in our SaaS](https://community.auth0.com/t/getting-started-with-okta-auth0-to-integrate-third-party-idp-in-our-saas/185384)

<div class="topic-metadata">

**Author:** [@7hibault](https://community.auth0.com/u/7hibault)\
**Replies:** 3\
**Last updated:** [April 23, 2025, 4:52pm UTC](https://community.auth0.com/t/getting-started-with-okta-auth0-to-integrate-third-party-idp-in-our-saas/185384 "2025-04-23T16:52:50Z")

</div>

Hi all, Our clients are asking us if they can log into our apps using their Okta IDP. They’re asking specifically about SAML integration, but I’m not sure if that’s a hard requirement. I’ve had an Okta/auth0 representa…

---

## [Auth0 with AWS Cognito OpenID Connect, how to skip re login](https://community.auth0.com/t/auth0-with-aws-cognito-openid-connect-how-to-skip-re-login/88735)

<div class="topic-metadata">

**Author:** [@avivk](https://community.auth0.com/u/avivk)\
**Replies:** 2\
**Last updated:** [February 18, 2025, 9:00pm UTC](https://community.auth0.com/t/auth0-with-aws-cognito-openid-connect-how-to-skip-re-login/88735 "2025-02-18T21:00:40Z")

</div>

hey! I’m using AWS Cognito as OIDC \<\> Auth0 as SAML-IDP (idp-initiated) \<\> SP. I have a web-app which has login mechanism with AWS Cognito pool, and I’m trying to redirect logged-in customers to third-party URL (which…

---

## [IdP initiated SSO when using Organizations](https://community.auth0.com/t/idp-initiated-sso-when-using-organizations/78937)

<div class="topic-metadata">

**Author:** [@lmazza-remote](https://community.auth0.com/u/lmazza-remote)\
**Replies:** 2\
**Last updated:** [September 24, 2024, 1:32pm UTC](https://community.auth0.com/t/idp-initiated-sso-when-using-organizations/78937 "2024-09-24T13:32:44Z")

</div>

I’m integrating a SaaS app with Auth0 to abstract SAML integration for our customers, and we got the SP initiated flows in place, but I’m hitting a wall when trying to get the IdP initiated flow to work using Okta. The …

---

## [The ‘givenname’ and ‘surname’ are missing from the SSO attributes](https://community.auth0.com/t/the-givenname-and-surname-are-missing-from-the-sso-attributes/79487)

<div class="topic-metadata">

**Author:** [@vashan](https://community.auth0.com/u/vashan)\
**Replies:** 2\
**Last updated:** [July 18, 2024, 11:14am UTC](https://community.auth0.com/t/the-givenname-and-surname-are-missing-from-the-sso-attributes/79487 "2024-07-18T11:14:33Z")

</div>

Hello Community, My notes on this: From the Applications screen on the Dashboard Selected the web application: Then selected Settings tab and scrolled to advanced settings expanded that and selected Endpoints: T…

---

## [How to configure shibboleth with SAML enterprise](https://community.auth0.com/t/how-to-configure-shibboleth-with-saml-enterprise/41746)

<div class="topic-metadata">

**Author:** [@justin.rigsby](https://community.auth0.com/u/justin.rigsby)\
**Replies:** 3\
**Last updated:** [February 13, 2024, 7:21pm UTC](https://community.auth0.com/t/how-to-configure-shibboleth-with-saml-enterprise/41746 "2024-02-13T19:21:45Z")

</div>

Hello, So I’m trying to configure a SAML connection but the client uses shibboleth. I’m not sure how this is used since their metadata seems to have a signing certificate and encoded. Also, they have provided mutiple si…

---

## [How can we bypass the login when hitting the saml web app addons to generate a saml response](https://community.auth0.com/t/how-can-we-bypass-the-login-when-hitting-the-saml-web-app-addons-to-generate-a-saml-response/26924)

<div class="topic-metadata">

**Author:** [@anumrauf932](https://community.auth0.com/u/anumrauf932)\
**Replies:** 2\
**Last updated:** [January 16, 2024, 12:35am UTC](https://community.auth0.com/t/how-can-we-bypass-the-login-when-hitting-the-saml-web-app-addons-to-generate-a-saml-response/26924 "2024-01-16T00:35:27Z")

</div>

My use case is, a user logged in the application and want to send the saml response to some external IDP, so when I initiated the saml call (https://{auth.domain}/samlp/{clientId}), is redirected to the login page but th…

---

## [Read SAML Response Claims from IdPs inside Actions](https://community.auth0.com/t/read-saml-response-claims-from-idps-inside-actions/88764)

<div class="topic-metadata">

**Author:** [@davidhouseknechtdev](https://community.auth0.com/u/davidhouseknechtdev)\
**Replies:** 7\
**Last updated:** [January 12, 2024, 2:33pm UTC](https://community.auth0.com/t/read-saml-response-claims-from-idps-inside-actions/88764 "2024-01-12T14:33:09Z")

</div>

I originally asked a similar question last year (Cannot Access Mapped SAML properties Inside Custom Action). The issue still persists so I am still using a custom Rule to access the SAML response field. I would like to …

---

## [Mobile + Identifier First + Enterprise Connections](https://community.auth0.com/t/mobile-identifier-first-enterprise-connections/41152)

<div class="topic-metadata">

**Author:** [@danielsomerfield](https://community.auth0.com/u/danielsomerfield)\
**Replies:** 1\
**Last updated:** [October 10, 2023, 1:48pm UTC](https://community.auth0.com/t/mobile-identifier-first-enterprise-connections/41152 "2023-10-10T13:48:47Z")

</div>

Has anyone implemented identifier first on an IOS app? We support multiple enterprise connections and are able to choose the connection at login time based on the email address. This seems to work out-of-the-box on web, …

---

## [SAML, SLO not working for me](https://community.auth0.com/t/saml-slo-not-working-for-me/118113)

<div class="topic-metadata">

**Author:** [@johan.eggers](https://community.auth0.com/u/johan.eggers)\
**Replies:** 2\
**Last updated:** [October 10, 2023, 7:47am UTC](https://community.auth0.com/t/saml-slo-not-working-for-me/118113 "2023-10-10T07:47:04Z")

</div>

Hi, I am trying to use the SAML SLO endpoint. I am using the npm library ‘saml2-js’, which nicely constructed this SAML slo token / request: Calling this url in the browser is successful and in the monitoring I get…

---

## [Is it possible to implement SSO with SAML using ReactJS and .NET 7?](https://community.auth0.com/t/is-it-possible-to-implement-sso-with-saml-using-reactjs-and-net-7/109513)

<div class="topic-metadata">

**Author:** [@datum](https://community.auth0.com/u/datum)\
**Replies:** 2\
**Last updated:** [September 14, 2023, 11:37am UTC](https://community.auth0.com/t/is-it-possible-to-implement-sso-with-saml-using-reactjs-and-net-7/109513 "2023-09-14T11:37:36Z")

</div>

I am trying to implement SSO with SAML in a React application with .NET 7 as the back end. I was able to create a SAML authentication in .NET 7 wit an another Identity Management Services and it works fine with MVC. But …

---

## [Help debugging some SAML Responses](https://community.auth0.com/t/help-debugging-some-saml-responses/111138)

<div class="topic-metadata">

**Author:** [@trevor.hirst](https://community.auth0.com/u/trevor.hirst)\
**Replies:** 1\
**Last updated:** [July 26, 2023, 10:17pm UTC](https://community.auth0.com/t/help-debugging-some-saml-responses/111138 "2023-07-26T22:17:19Z")

</div>

Is it possible to log/capture the request.body.SAMLResponse value? I’ve tried using a rule and the request body appears to be an empty object. As a side question, is it required for a SAMLResponse to contain both the re…

---

## [Adding Custom SAML Attributes from User Profile to Claims in Custom Action](https://community.auth0.com/t/adding-custom-saml-attributes-from-user-profile-to-claims-in-custom-action/107054)

<div class="topic-metadata">

**Author:** [@monstarmike](https://community.auth0.com/u/monstarmike)\
**Replies:** 1\
**Last updated:** [May 21, 2023, 12:21am UTC](https://community.auth0.com/t/adding-custom-saml-attributes-from-user-profile-to-claims-in-custom-action/107054 "2023-05-21T00:21:58Z")

</div>

Hello, I’ve set up an enterprise connection where Auth0 is the service provider. I’m mapping customer attributes on the provider, StoreID and Role, to location\_id and idp\_provided\_role on the user profile. I logged in …

---

## [Invalid\_request: The connection "dev-saml-sp" was not found](https://community.auth0.com/t/invalid-request-the-connection-dev-saml-sp-was-not-found/91517)

<div class="topic-metadata">

**Author:** [@mohanraheja](https://community.auth0.com/u/mohanraheja)\
**Replies:** 1\
**Last updated:** [September 30, 2022, 3:16pm UTC](https://community.auth0.com/t/invalid-request-the-connection-dev-saml-sp-was-not-found/91517 "2022-09-30T15:16:59Z")

</div>

0 I have setup auth0 as SAMl service provider and okta as the Identity provider, I am able to navigate to the okta authentication page while trying the connection from auth0, but after redirect I’m getting the error bel…

---

## [Clarification on what an "enterprise connection" is](https://community.auth0.com/t/clarification-on-what-an-enterprise-connection-is/91406)

<div class="topic-metadata">

**Author:** [@abrahamlincolnblockc](https://community.auth0.com/u/abrahamlincolnblockc)\
**Replies:** 1\
**Last updated:** [September 28, 2022, 1:26pm UTC](https://community.auth0.com/t/clarification-on-what-an-enterprise-connection-is/91406 "2022-09-28T13:26:20Z")

</div>

Hi there, I’m a developer looking to implement SSO for our company. I see under the B2B tier on the pricing page that both the “essentials” plan and the “professional” plan come with only 3 enterprise connections, and I …

---

## [ADFS with SAML connection](https://community.auth0.com/t/adfs-with-saml-connection/91191)

<div class="topic-metadata">

**Author:** [@mab](https://community.auth0.com/u/mab)\
**Replies:** 1\
**Last updated:** [September 25, 2022, 11:27pm UTC](https://community.auth0.com/t/adfs-with-saml-connection/91191 "2022-09-25T23:27:07Z")

</div>

Hello, I have to create a connection with ADFS but the website should use SAML, not WS-FED. In Enterprise connection I have two options: ADFS - if I use it there is the possibility to configure SAML here? SAML - if t…

---

## [Passing custom SAML data as ApplicationMetaData and not UserMetaData](https://community.auth0.com/t/passing-custom-saml-data-as-applicationmetadata-and-not-usermetadata/88554)

<div class="topic-metadata">

**Author:** [@avivk](https://community.auth0.com/u/avivk)\
**Replies:** 3\
**Last updated:** [August 14, 2022, 7:19am UTC](https://community.auth0.com/t/passing-custom-saml-data-as-applicationmetadata-and-not-usermetadata/88554 "2022-08-14T07:19:30Z")

</div>

hey, I have static common XML attributes that I would like to pass for each user, I’m performing and IDP-initiated-flow using AWS Cognito \<\> Auth0 \<\> SP, I have configured: Rule to support static data with mappings (s…

---

## [Getting SAML Response instead of LogoutResponse for the LogoutResquest sent to Auth0 IdP](https://community.auth0.com/t/getting-saml-response-instead-of-logoutresponse-for-the-logoutresquest-sent-to-auth0-idp/88047)

<div class="topic-metadata">

**Author:** [@sahilchhabra1](https://community.auth0.com/u/sahilchhabra1)\
**Replies:** 1\
**Last updated:** [August 3, 2022, 3:54pm UTC](https://community.auth0.com/t/getting-saml-response-instead-of-logoutresponse-for-the-logoutresquest-sent-to-auth0-idp/88047 "2022-08-03T15:54:03Z")

</div>

I am using Auth0 as Identity Provider and trying to implement SAML based Service Provider initiated Single Logout (SLO). I send the following LogoutRequest from my service to the Auth0 Identity Provider Login URL which l…

---

## [Connect Node.js to Multiple SAML IdP](https://community.auth0.com/t/connect-node-js-to-multiple-saml-idp/86528)

<div class="topic-metadata">

**Author:** [@ansnoussi](https://community.auth0.com/u/ansnoussi)\
**Replies:** 1\
**Last updated:** [May 20, 2024, 11:52am UTC](https://community.auth0.com/t/connect-node-js-to-multiple-saml-idp/86528 "2024-05-20T11:52:41Z")

</div>

Hi Everyone, I have a simple MERN app that currently doesn’t use Auth0, but instead I’m using a basic jwt authentication. I want to make it possible for users to use SSO with an IdP that they specify. (make it possibl…

---

## [Changing issuer in Auth0 SAML enterprise connection](https://community.auth0.com/t/changing-issuer-in-auth0-saml-enterprise-connection/85216)

<div class="topic-metadata">

**Author:** [@dsteblyuk](https://community.auth0.com/u/dsteblyuk)\
**Replies:** 4\
**Last updated:** [June 20, 2022, 6:45am UTC](https://community.auth0.com/t/changing-issuer-in-auth0-saml-enterprise-connection/85216 "2022-06-20T06:45:48Z")

</div>

Is it possible to change issuer (default is “urn:auth0:YOUR\_TENANT:YOUR\_CONNECTION\_NAME”) in a SAML connection via Auth0 Management API? For context, we are migrating customers from old SSO system to Auth0 and they alrea…

---

## [What are the supported properties when creating a SAML connection via the management API?](https://community.auth0.com/t/what-are-the-supported-properties-when-creating-a-saml-connection-via-the-management-api/79016)

<div class="topic-metadata">

**Author:** [@jivinivan](https://community.auth0.com/u/jivinivan)\
**Replies:** 8\
**Last updated:** [March 2, 2022, 10:43pm UTC](https://community.auth0.com/t/what-are-the-supported-properties-when-creating-a-saml-connection-via-the-management-api/79016 "2022-03-02T22:43:00Z")

</div>

Hello! I would like to create SAML connections via the management API however I’m unable to find the supported properties for this connection. They are not listed here: Auth0 Management API v2 A similar question was as…

---

## [Getting invalid user in rules, while doing auth with SAML (Okta)](https://community.auth0.com/t/getting-invalid-user-in-rules-while-doing-auth-with-saml-okta/77775)

<div class="topic-metadata">

**Author:** [@raja](https://community.auth0.com/u/raja)\
**Replies:** 2\
**Last updated:** [February 9, 2022, 1:19pm UTC](https://community.auth0.com/t/getting-invalid-user-in-rules-while-doing-auth-with-saml-okta/77775 "2022-02-09T13:19:32Z")

</div>

I’ve created a private okta integration, following the instruction here. I am getting an invalid, empty user in the rule. Even when I test the saml connection with rule, the auth0 debug page shows empty user object. …

---

## [Cannot Access Mapped SAML Properties inside Custom Action](https://community.auth0.com/t/cannot-access-mapped-saml-properties-inside-custom-action/63615)

<div class="topic-metadata">

**Author:** [@davidhouseknechtdev](https://community.auth0.com/u/davidhouseknechtdev)\
**Replies:** 5\
**Last updated:** [January 5, 2022, 11:01am UTC](https://community.auth0.com/t/cannot-access-mapped-saml-properties-inside-custom-action/63615 "2022-01-05T11:01:07Z")

</div>

Hello, I have a SAML connection where Auth0 is the Service Provider for my application. I am trying out the new login flows but am running into a small problem that I’m not sure how to solve. What I am trying to do On…

---

## [Trouble Configuring SAML Mappings](https://community.auth0.com/t/trouble-configuring-saml-mappings/50443)

<div class="topic-metadata">

**Author:** [@mattln](https://community.auth0.com/u/mattln)\
**Replies:** 3\
**Last updated:** [September 25, 2020, 3:26pm UTC](https://community.auth0.com/t/trouble-configuring-saml-mappings/50443 "2020-09-25T15:26:09Z")

</div>

I am attempting to connect SAML to my application using Okta as the IDP, and Auth0 as the SP. I have gotten the base connection setup up correct, but I am having trouble getting the SAML Mappings to apply to the user’s p…

---

## [Identifier first Universal Login for SAML users without HRD](https://community.auth0.com/t/identifier-first-universal-login-for-saml-users-without-hrd/72073)

<div class="topic-metadata">

**Author:** [@shmurakami](https://community.auth0.com/u/shmurakami)\
**Replies:** 2\
**Last updated:** [October 27, 2021, 12:10pm UTC](https://community.auth0.com/t/identifier-first-universal-login-for-saml-users-without-hrd/72073 "2021-10-27T12:10:34Z")

</div>

Hi, I’m migrating my system authentication features to Auth0. My system has SAML feature and users redirect their own IdP relates their account resolved by mail address. I want to achieve this feature on Auth0 using Un…

---

## [The SAMLResponse ID was already processed on OneLogin SSO connection](https://community.auth0.com/t/the-samlresponse-id-was-already-processed-on-onelogin-sso-connection/70762)

<div class="topic-metadata">

**Author:** [@j.ortiz](https://community.auth0.com/u/j.ortiz)\
**Replies:** 7\
**Last updated:** [October 18, 2021, 10:19am UTC](https://community.auth0.com/t/the-samlresponse-id-was-already-processed-on-onelogin-sso-connection/70762 "2021-10-18T10:19:28Z")

</div>

I have created 2 enterprise SAML connections to work as service provider for Okta and Jumpcloud, and everything is working fine. I have left a connection with OneLogin. I am following this document: Configure OneLogin a…

---

## [Post-login event object is missing several of the user fields](https://community.auth0.com/t/post-login-event-object-is-missing-several-of-the-user-fields/70580)

<div class="topic-metadata">

**Author:** [@matt.dietrich](https://community.auth0.com/u/matt.dietrich)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 11:18pm UTC](https://community.auth0.com/t/post-login-event-object-is-missing-several-of-the-user-fields/70580 "2021-10-13T23:18:19Z")

</div>

While trying to migrate an application to use Actions, I noticed that the list of user fields in the post-login event doesn’t include all of the fields shown on the User Details page under User Management within the Dash…

[Next page](https://community.auth0.com/tag/saml/18.md?match_all_tags=true&page=1&tags%5B%5D=saml)
