# Error Parsing SAML Response

**URL:** <https://forum.inductiveautomation.com/t/error-parsing-saml-response/65408>\
**Category:** Ignition\
**Created:** [October 19, 2022, 3:29pm UTC](https://forum.inductiveautomation.com/t/error-parsing-saml-response/65408 "2022-10-19T15:29:21Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Justin\_Szatkowski](https://avatars.discourse-cdn.com/v4/letter/j/c6cbf5/32.png) [@Justin\_Szatkowski](https://forum.inductiveautomation.com/u/Justin_Szatkowski)\
**Post date:** [October 19, 2022, 3:29pm UTC](https://forum.inductiveautomation.com/t/error-parsing-saml-response/65408/1 "2022-10-19T15:29:21Z")

</div>

Hello,

I am trying to use a Microsoft Azure Active Directory as an Identity Provider. When using an SAML response, the following error appears in the Ignition logs:

com.inductiveautomation.ignition.gateway.auth.idp.IdpAdapterException: Unable to parse the WebAuthResponse from the HTTP request

When doing a test login, the login page is correct however there is no IDP response data. Is there something different about the way Azure AD is sending this SAML? When comparing it with a working Okta IDP, there doesn't appear to be any difference.

Any help or insight would be appreciated.

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [October 19, 2022, 4:38pm UTC](https://forum.inductiveautomation.com/t/error-parsing-saml-response/65408/2 "2022-10-19T16:38:01Z")

</div>

Can you post the full stack trace of the IdpAdapterException?

---

<div class="post-metadata">

**Author:** ![Justin\_Szatkowski](https://avatars.discourse-cdn.com/v4/letter/j/c6cbf5/32.png) [@Justin\_Szatkowski](https://forum.inductiveautomation.com/u/Justin_Szatkowski)\
**Post date:** [October 19, 2022, 4:55pm UTC](https://forum.inductiveautomation.com/t/error-parsing-saml-response/65408/3 "2022-10-19T16:55:05Z")

</div>

I solved the issue, unchecking the Validate Response Signatures \* seemed to allow the IDP to be read.

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [October 19, 2022, 5:04pm UTC](https://forum.inductiveautomation.com/t/error-parsing-saml-response/65408/4 "2022-10-19T17:04:55Z")

</div>

Make sure to have at least one of the Validate Response Signatures or Validate Assertion Signatures settings enabled. Having both disabled is a security issue since Ignition will not check if SAML Responses / Assertions are forged.

---

<div class="post-metadata">

**Author:** ![Justin\_Szatkowski](https://avatars.discourse-cdn.com/v4/letter/j/c6cbf5/32.png) [@Justin\_Szatkowski](https://forum.inductiveautomation.com/u/Justin_Szatkowski)\
**Post date:** [October 19, 2022, 5:40pm UTC](https://forum.inductiveautomation.com/t/error-parsing-saml-response/65408/5 "2022-10-19T17:40:59Z")

</div>

Understood, thank you for the feedback. Will let you know if any other issues arise.