SAML SSO Error - "SAML Response body must contain RelayState"

Question

HI Team,

I am trying to use Azure AD as identity provider to IBM CLoud. I am getting below error now -

please help.

{"error":"invalid_request","error_description":"SAML Response body must contain RelayState"}

Answer 1

Hello, IBMid supports both IdP and SP initiated flows. In your case it looks like your application is expecting a RelayState param which could signal an SP initiated flow.

In case you're attempting:

IdP initiated

You need to set the Relay State in the enterprise app -> Single sign-on -> Basic SAML Configuration form:

SP inititated

Your application (SP) needs to send the RelayState value as part of the SAML Authentication Request. It can be sent as an HTTP Parameter alongside a SAML AuthRequest..

You can verify if you application is actually sending a RelayState param collecting a network trace with Fiddler or with the browser.

Let us know if you need additional assistance. If the answer was helpful, please accept it so that others can find a solution.