File tree Expand file tree Collapse file tree 1 file changed +11
-9
lines changed Expand file tree Collapse file tree 1 file changed +11
-9
lines changed Original file line number Diff line number Diff line change @@ -505,16 +505,18 @@ do not match required audience [https://my.kibana.url]])
505505
506506*Resolution:*
507507
508- We received a SAML response that is addressed to another SAML Service Provider. This
509- usually means that the configured SAML Service Provider Entity ID in`elasticsearch.yml`
510- (`sp.entity_id`) does not match what has been configured as SAML Service Provider Entity ID
511- in the SAML Identity Provider documentation. To resolve this issue:
508+ We received a SAML response that is addressed to another SAML Service Provider.
509+ This usually means that the configured SAML Service Provider Entity ID in
510+ `elasticsearch.yml` (`sp.entity_id`) does not match what has been configured as
511+ the SAML Service Provider Entity ID in the SAML Identity Provider documentation.
512+
513+ To resolve this issue, ensure that both the saml realm in {es} and the IdP are
514+ configured with the same string for the SAML Entity ID of the Service Provider.
515+
516+ TIP: These strings are compared as case-sensitive strings and not as
517+ canonicalized URLs even when the values are URL-like. Be mindful of trailing
518+ slashes, port numbers, etc.
512519
513- .. Ensure that both the saml realm in {es} and the IdP are configured with the same string
514- for the SAML Entity ID of the Service Provider.
515- .. Note that these are also compared as case-sensitive strings and not as
516- canonicalized URLs even when the values are URL-like. Be mindful of trailing slashes, port
517- numbers etc.
518520--
519521
520522. *Symptoms:*
You can’t perform that action at this time.
0 commit comments