What kind of failure a SamlError is. An application usually answers every one of them the
same way (the sign-in failed, start again), and logs the code and message for the operator.
config: the configuration is incomplete or contradictory.
metadata: the identity provider's metadata could not be fetched or does not describe what is needed.
binding: the request at the assertion consumer service does not carry a SAML message in a binding
this service provider accepts.
xml: the message is not well-formed XML, or carries a DOCTYPE.
signature: a signature is missing, uses an algorithm that is refused, or does not verify.
status: the identity provider answered with a non-success status. SamlError.status has it.
validation: the message verified but a check on its content failed (audience, recipient, time
window, InResponseTo, issuer, ...).
replay: the assertion has been accepted before.
artifact: the artifact could not be resolved.
decryption: an encrypted assertion or NameID could not be decrypted.
ssf: the Shared Signals transmitter could not be found, or its stream created or polled.
What kind of failure a SamlError is. An application usually answers every one of them the same way (the sign-in failed, start again), and logs the code and message for the operator.
config: the configuration is incomplete or contradictory.metadata: the identity provider's metadata could not be fetched or does not describe what is needed.binding: the request at the assertion consumer service does not carry a SAML message in a binding this service provider accepts.xml: the message is not well-formed XML, or carries a DOCTYPE.signature: a signature is missing, uses an algorithm that is refused, or does not verify.status: the identity provider answered with a non-success status. SamlError.status has it.validation: the message verified but a check on its content failed (audience, recipient, time window,InResponseTo, issuer, ...).replay: the assertion has been accepted before.artifact: the artifact could not be resolved.decryption: an encrypted assertion or NameID could not be decrypted.ssf: the Shared Signals transmitter could not be found, or its stream created or polled.