When launching Skeddly from your identity provider, you may encounter the following error message:

SAML response does not contain identity providers

This error indicates that the SAML response received from your identity provider did not include the "https://skeddly.com/SAML/Attributes/Roles" attribute.

This attribute is used to identify to Skeddly the Skeddly identity provider that should be used to decrypt your SAML response.

This attribute must contain the following, comma-separated:

  • The SRN of your Skeddly identity provider. This looks like srn:skeddly:idp::12345678:name
  • One or more SRNs of Skeddly managed policies you want to assign to the user when signing-in.

Example

The following is a portion of the SAML XML that the identity provider sends to Skeddly. It shows the required attribute formats.

    <saml:AttributeStatement>
      <saml:Attribute Name="https://skeddly.com/SAML/Attributes/Roles"
          NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">srn:skeddly:idp::01234567:OneLogin,srn:skeddly:policy:::standard</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>

The above is not a complete SAML response, but it shows the attribute portion with the https://skeddly.com/SAML/Attributes/Roles portion.

Did this answer your question?