What kind of failure a WsFedError is. An application usually answers every one of them the
same way (the sign-in failed, start again), and logs the code and message for the operator.
config: the configuration is incomplete or contradictory.
metadata: the identity provider's federation metadata could not be fetched or does not describe a
WS-Federation security token service that issues SAML 2.0 assertions.
message: the request at the reply URL is not a WS-Federation sign-in response (wa=wsignin1.0
with a wresult), or its wresult is not a RequestSecurityTokenResponse this relying party reads.
xml: the message is not well-formed XML, or carries a DOCTYPE.
signature: the assertion's signature is missing, uses an algorithm that is refused, or does not verify.
validation: the assertion verified but a check on its content failed (audience, recipient, time
window, issuer, wctx, ...).
replay: the assertion has been accepted before.
decryption: an encrypted assertion, NameID or attribute could not be decrypted.
ssf: the Shared Signals transmitter could not be found, or its stream created or polled.
What kind of failure a WsFedError is. An application usually answers every one of them the same way (the sign-in failed, start again), and logs the code and message for the operator.
config: the configuration is incomplete or contradictory.metadata: the identity provider's federation metadata could not be fetched or does not describe a WS-Federation security token service that issues SAML 2.0 assertions.message: the request at the reply URL is not a WS-Federation sign-in response (wa=wsignin1.0with awresult), or itswresultis not a RequestSecurityTokenResponse this relying party reads.xml: the message is not well-formed XML, or carries a DOCTYPE.signature: the assertion's signature is missing, uses an algorithm that is refused, or does not verify.validation: the assertion verified but a check on its content failed (audience, recipient, time window, issuer,wctx, ...).replay: the assertion has been accepted before.decryption: an encrypted assertion, NameID or attribute could not be decrypted.ssf: the Shared Signals transmitter could not be found, or its stream created or polled.