Received "RECEIVED SAML LOGIN RESPONSE IS NOT VALID" on Login Page?

Toa_Lihkan

Greetings,

I use Azure SSO to login to my Decisions instance. Everything was running as expected until today, when I and the few other developers with myself could not get into our environment. Instead of the home portal in Decisions, we saw this error:

"RECEIVED SAML LOGIN RESPONSE IS NOT VALID" 

Even after deleting and readding the SAML settings via a native account, I'm still getting the same error. This just stopped working today. Could anyone indicate why this might suddenly happen?

gregory_Decisions

Hello!

If the error just started occurring today and no changes have been made to the Decisions environment, it's possible that your Azure certificate could have expired.

If this is the case, you would need to renew your certificate then re-paste the updated information or metadata URL into the Decisions SAML settings (https://documentation.decisions.com/v8/docs/en/setting-up-sso-for-azure-ad)

If you have confirmed this is not a certificate expiration, this may be an issue related to the response Timestamp and request timestamp being out-of-sync. Try enabling Ignore Date Condition in the settings. Please note that enabling this does reduce security (https://documentation.decisions.com/docs/sso-basics)

We hope this helps!

-Gregory