Home / server / Questions / 1021694
In Process
user540468
Asked: 2020-06-17 05:06:15 +0800 CST

How can I resolve "SAML Providers must reference at least one SAML assertion issuer" message?

  • 772

I want to setup a SSO solution using Keycloak 10.0.2 as the Identity Provider. The first application I want to setup is AWS.

I followed this tutorial to enable Keycloak to sign me in using SAML. I noticed, that this tutorial is guiding me to download the “SAML Metadata IDPSSODescriptor” from the client's "Installation"-Tab. However, I can only choose "SAML Metadata SPSSODescriptor".

In AWS, I entered the name of my realm as "Provider Name" and imported the SPSSODescriptor. This led to the following error: SAML Providers must reference at least one SAML assertion issuer.

single-sign-on amazon-web-services keycloak saml

2 Answers

  1. In downloaded xml file change SPSSODescriptor to IDPSSODescriptor for both opening and closing tags. Also entityID should be "https://KEYCLOAK-URL/auth/realms/YOUR-REALMS-NAME"

    • 3

  2. Use the command:

    wget https://KEYCLOAK-URL/auth/realms/YOUR-REALMS-NAME/protocol/saml/descriptor

    and

    upload descripter
    • 0