Troubleshooting SAML2Error status code Requester during SSO loginIssue When SSO is enabled, some SAML requests fail with the error SAML2Error: SAML failed to login, Status code is urn:oasis:names:tc:SAML:2.0:status:Requester. The syslog table shows the following entry: Source: SAML2Error: SAML2Error: SAML failed to login, Status code is urn:oasis:names:tc:SAML:2.0:status:Requester. The expected status is urn:oasis:names:tc:SAML:2.0:status:Success. Symptoms •SAML requests fail when SSO is enabled. •The syslog table shows SAML2Error: SAML failed to login, Status code is urn:oasis:names:tc:SAML:2.0:status:Requester. •The expected status is urn:oasis:names:tc:SAML:2.0:status:Success. Release Cause When the IdP (for example, ADFS) responds with a status of oasis:names:tc:SAML:2.0:status:Requester, the IdP rejected the request sent to it. In most cases, the SAML response from the IdP does not provide further details about the error. Note: urn:oasis:names:tc:SAML:2.0:status:Requester means the IdP rejected the SAML request. The IdP responds with Requester instead of Success. Resolution Review the IdP event logs and the instance system logs to understand the error. Then tune the instance SAML settings or update the IdP settings to avoid the problem. To review the SAML request sent, use the browser development tools or contact the IdP for more details. For debugging, you should install a SAML debugging tool in the browser. These tools show the SAML information sent and received in a more readable format. See Related Links for tools for Firefox and Chrome. To troubleshoot: 1.Install a SAML debugging tool in the browser used to validate the problem. 2.Reproduce the problem. 3.Review the SAML request sent to the IdP (for example, ADFS). 4.Provide the SAML request to the IdP administrator. 5.Contact the IdP administrator to understand the reason for the urn:oasis:names:tc:SAML:2.0:status:Requester status. 6.Tune the instance SAML settings or update the IdP settings based on the IdP findings. Note: urn:oasis:names:tc:SAML:2.0:status:Requester means the IdP did not like the SAML request that was sent, so it will respond with "Requester" instead of "Success". Related Links •Install SAML tracer extension for Firefox •Install SAML Chrome panel extension for Chrome https://learn.microsoft.com/en-us/power-pages/security/authentication/saml2-settings