[JIRA] (JENKINS-49613) SAML Plug org.pac4j.saml.exceptions.SAMLException: No valid subject assertion found in response

[ifernandezca...@cloudbees.com (JIRA)]

Title: Message Title

Ivan Fernandez Calvo commented on JENKINS-49613   Re: SAML Plug org.pac4j.saml.exceptions.SAMLException: No valid subject assertion found in response Check that you have configured all fields https://support.cloudbees.com/hc/en-us/articles/115000105752-How-do-I-setup-OKTA-as-Identity-Provider-in-Jenkins- Try to enable advanced option force authentication and take a look at the troubleshooting guide there is a known issue with Azure pretty similar Also is weird there is no "saml:AttributeStatement" that contains the username and other details. <saml:AttributeStatement> <saml:Attribute Name="urn:mace:dir:attribute-def:uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> <saml:AttributeValue xsi:type="xs:string">tesla</saml:AttributeValue> </saml:Attribute> <saml:Attribute Name="urn:mace:dir:attribute-def:displayName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> <saml:AttributeValue xsi:type="xs:string">Tesla</saml:AttributeValue> </saml:Attribute> <saml:Attribute Name="urn:mace:dir:attribute-def:groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> <saml:AttributeValue xsi:type="xs:string">developer</saml:AttributeValue> <saml:AttributeValue xsi:type="xs:string">browser</saml:AttributeValue> </saml:Attribute> <saml:Attribute Name="urn:mace:dir:attribute-def:mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> <saml:AttributeValue xsi:type="xs:string">ema...@example.com</saml:AttributeValue> <saml:AttributeValue xsi:type="xs:string">ema...@example.com</saml:AttributeValue> </saml:Attribute> <saml:Attribute Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> <saml:AttributeValue xsi:type="xs:string">university.example.org</saml:AttributeValue> </saml:Attribute> </saml:AttributeStatement> Configure guide Add Comment   This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.