AADSTS75005: The request is not a valid Saml2 protocol message.

SAML for ASP.NET
1

This is the code that i do get problem with:

var samlConfiguration = new SAMLConfiguration
{
LocalServiceProviderConfiguration = new LocalServiceProviderConfiguration
{
Name = “identifier_url”,
AssertionConsumerServiceUrl = “acs_url”
}
};
samlConfiguration.AddPartnerIdentityProvider(new PartnerIdentityProviderConfiguration
{
Name = “identifier_url”,
SingleSignOnServiceUrl = “saml_url”,
PartnerCertificateString = “cert”,
DisableRecipientCheck = true,
DisableDestinationCheck = true
});

SAMLController.Configuration = samlConfiguration;
SAMLServiceProvider.InitiateSSO(Response, null, “identifier_url”);

return new EmptyResult();

am i missing or doing something wrong?


2

That’s an error message generated by Azure AD.
Assuming the …_url values are just placeholders, I don’t see anything wrong with the code.
Please enable SAML trace and send the generated log file as an email attachment to support@componentspace.com mentioning this topic.
https://www.componentspace.com/Forums/17/Enabing-SAML-Trace

3
[quote]
ComponentSpace - 4/24/2018
That's an error message generated by Azure AD.
Assuming the ..._url values are just placeholders, I don't see anything wrong with the code.
Please enable SAML trace and send the generated log file as an email attachment to support@componentspace.com mentioning this topic.
https://www.componentspace.com/Forums/17/Enabing-SAML-Trace
[/quote]

sent you the log file.

thanks.
4

Thank you for the log.
One thing I noticed is that the AssertionConsumerServiceURL in the SAML authn request sent to Azure AD is set to “/account/assertionconsumerservice/”.
This value comes from AssertionConsumerServiceURL in your saml.config.
Try setting this to the absolute URL or use the tilde character to resolve the URL.
For example: “~/account/assertionconsumerservice/”.
If there’s still an issue, please send another log as well as screenshots of the settings in Azure AD.

5
[quote]
ComponentSpace - 4/25/2018
Thank you for the log.
One thing I noticed is that the AssertionConsumerServiceURL in the SAML authn request sent to Azure AD is set to "/account/assertionconsumerservice/".
This value comes from AssertionConsumerServiceURL in your saml.config.
Try setting this to the absolute URL or use the tilde character to resolve the URL.
For example: "~/account/assertionconsumerservice/".
If there's still an issue, please send another log as well as screenshots of the settings in Azure AD.
[/quote]

ty for quick response, i've noticed that too.
6

Let me know how that goes.
Please send another log file if there’s still an issue.

7
[quote]
ComponentSpace - 4/25/2018
Let me know how that goes.
Please send another log file if there's still an issue.
[/quote]

problem is solved, thanks.
8

Thanks for the update.