EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB486467: “Authentication Error. Your login has been denied by the system." error shows while attempting to log in MicroStrategy Library using SAML authentication in MicroStrategy ONE Update 12


Katarzyna Olszewska

Senior Cloud Support Engineer III • MicroStrategy


This knowledge base article discusses an issue related to SAML authentication configuration.

Symptom


While trying to log in, users consistently receive “Authentication Error. Your login has been denied by the system." error message.
 

ka0PW0000001FZhYAM_0EMPW000004n49q.jpeg

Following entries can be found in the SAML.log:
 


Invalid assertion [id112341234123412345] for SAML response [id112341234123412345]: 
Condition '{urn:oasis:names:tc:SAML:2.0:assertion} AudienceRestriction' of type 'null' 
in assertion 'id112341234123412345' was not valid.:  
None of the audiences within Assertion 'id112341234123412345' matched the list of valid audiances (…)

Upon further investigation, SAML response shows that the audience sent by the Identity Provider does not match the one in SAML configuration files on Strategy Library side.
SAML Response:

<saml2:AudienceRestriction><saml2:Audience>
MstrTSSaml
</saml2:Audience></saml2:AudienceRestriction> 

MstrSamlConfig.xml:

  <entityId>MSTRTSSAML</entityId>

SPMetadata.xml:

<ns0:EntityDescriptor xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ns1=
"http://www.w3.org/2000/09/xmldsig#" ID="MSTRTSSAML" entityID="MSTRTSSAML">

 

Solution


Modifying the entityID field on the Identity Provider or Strategy side so they fully match, taking case sensitivity into account. 
 
 


Comment

0 comments

Details

Knowledge Article

Published:

April 4, 2024

Last Updated:

April 4, 2024