Troubleshooting

Wrong ACS URL / Recipient / Destination

The address where the IdP sends the response is not exactly the application's. Common case: a reverse proxy turns the application from https to http internally, or adds a path.

“Wrong ACS URL” / “Recipient” / “Destination”Destination, Recipient

Probable cause. The address the IdP sends the response to is not exactly the application's. Common case: a reverse proxy turns the application from https to http internally, or adds a path.

What to do? Fix the ACS URL declared on the IdP side (copy it from the application's metadata). Also check the application's public URL setting when it sits behind a proxy.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my spaceDecode a SAML response