Troubleshooting

Unexpected InResponseTo / unsolicited response

The application cannot find the request the response refers to: session lost in the meantime (blocked cookie, other browser, other tab), several servers without session sharing, or sign-in started from the IdP while the application forbids it.

"Unexpected InResponseTo" / "unsolicited response"InResponseTo

Probable cause. The application cannot find the request the response refers to: session lost in the meantime (blocked cookie, another browser, another tab), several servers without session sharing, or a login started from the IdP while the application forbids it.

What to do? Restart the login from the application in a single tab. Behind a load balancer, share the session state. For IdP-initiated, allow it explicitly if that is intended.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.