Symantec Access Management

 View Only
Expand all | Collapse all

Denying request due to no attribute returned from SAML2 assertion generator

Jump to Best Answer
  • 1.  Denying request due to no attribute returned from SAML2 assertion generator

    Posted Nov 09, 2018 01:42 AM

    Hello All,

     

    I am getting below error in FWSTrace log.

     

    [11/09/2018][06:22:21][19144][71][6f3d5b0e-9f7101d1-bead3e79-f439e403-78e9ace7-eba][SSO.java][processAssertionGeneration][Transaction with ID: 6f3d5b0e-9f7101d1-bead3e79-f439e403-78e9ace7-eba failed. Reason: FAILED_NO_ATTR_RETURNED]
    [11/09/2018][06:22:21][19144][71][6f3d5b0e-9f7101d1-bead3e79-f439e403-78e9ace7-eba][SSO.java][processAssertionGeneration][Denying request due to no attribute returned from SAML2 assertion generator.]
    [11/09/2018][06:22:22][19144][71][6f3d5b0e-9f7101d1-bead3e79-f439e403-78e9ace7-eba][SSO.java][processAssertionGeneration][Sending error for unsolicited response]
    [11/09/2018][06:22:22][19144][71][6f3d5b0e-9f7101d1-bead3e79-f439e403-78e9ace7-eba][ErrorRedirectionHandler.java][redirectToErrorPage][Sending HTTP Error 500 ]

     

    Its clearly saying that since no attributes are there in response due to which its failing.

     

    In policy server logs I could see that user is successfully getting authenticated and authorized.

     

    IDP initiated Journey

    Response Attribute : FirstName,LastName,Email

     

    Can someone help me with this issue. Why we are getting this error.

     

    Regards,

    Vivek



  • 2.  Re: Denying request due to no attribute returned from SAML2 assertion generator
    Best Answer

    Posted Nov 12, 2018 01:39 AM

    Since NameID attribute was wrong, So we were facing the issue. 

     

    After giving the correct NameID attribute issue got resolved.

     

    Regards,

    Vivek