AWS SSO using SAML in php application

Question

I used following Reference URL to configure the AWS SSO for our application. But I'm getting following error from AWS "Your request included an invalid SAML response. To logout, click here",

https://simplesamlphp.org/docs/stable/simplesamlphp-install https://simplesamlphp.org/docs/stable/simplesamlphp-idp

http://www.ipragmatech.com/aws-sso-saml2-simplesamlphp/ https://vlasenko.org/2015/04/05/howto-register-aws-saml-metadata-in-simplesamlphp/

But I dont know what i missing in simplesamlphp configuration

Please help me to solve this issue

Answer 1

The Amazon AWS troubleshooting guide suggests checking that the SAML response has a attribute with name https://aws.amazon.com/SAML/Attributes/Role with a attribute value of the ARN of a role or ARN of the SAML provider.

You can use this chrome plugin to view the content of your SAML response

See the guide for more info