Troubleshooting

Unable to decode SAMLRequest

With the Redirect binding, the request is compressed (deflate) before base64. A tool that only decodes base64 sees unreadable characters.

"Unable to decode SAMLRequest"Redirect

Probable cause. With the Redirect binding, the request is compressed (deflate) before base64. A tool that only decodes base64 sees unreadable characters.

What to do? Use the ID-Kit decoder, which handles compression, or check that the URL was not truncated.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.