https://community.cisco.com/t5/network-access-control/ise-saml-authentication-failed/m-p/3931270#M456811 <P>Hi,</P><P>&nbsp;</P><P>We have configured our sponsor portal to use SAML authentication.&nbsp; I used to work but now i am getting back an authentication failure.</P><P>When looking at the debug logs i am getting the following:</P><P>IdP ID: AzureAD</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Subject: username@domain.</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Status Code:urn:oasis:names:tc:SAML:2.0:status:Success</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Success:false</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Status Message:null</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML email:</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Exception:Several certificates configured on IdP but SAML response doesn't contain signing certificateUserRole : SPONSOR</P><P>&nbsp;</P><P>Any idea where i need to start looking?</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 27 Sep 2019 07:05:26 GMT Frederik De Muyter 2019-09-27T07:05:26Z https://community.cisco.com/t5/network-access-control/ise-saml-authentication-failed/m-p/3931270#M456811 <P>Hi,</P><P>&nbsp;</P><P>We have configured our sponsor portal to use SAML authentication.&nbsp; I used to work but now i am getting back an authentication failure.</P><P>When looking at the debug logs i am getting the following:</P><P>IdP ID: AzureAD</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Subject: username@domain.</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Status Code:urn:oasis:names:tc:SAML:2.0:status:Success</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Success:false</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Status Message:null</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML email:</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SAML Exception:Several certificates configured on IdP but SAML response doesn't contain signing certificateUserRole : SPONSOR</P><P>&nbsp;</P><P>Any idea where i need to start looking?</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 27 Sep 2019 07:05:26 GMT https://community.cisco.com/t5/network-access-control/ise-saml-authentication-failed/m-p/3931270#M456811 Frederik De Muyter 2019-09-27T07:05:26Z https://community.cisco.com/t5/network-access-control/ise-saml-authentication-failed/m-p/3931979#M456817 <P>Please engage Cisco TAC on this.</P> Sun, 29 Sep 2019 02:54:33 GMT https://community.cisco.com/t5/network-access-control/ise-saml-authentication-failed/m-p/3931979#M456817 hslai 2019-09-29T02:54:33Z