There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP:

Incoming SAML message is not properly formatted, or has elements which are missing or invalid.

Reason: SAML response reported an IdP error.

We're using the correct version of SAML and tried a few Claim Rules of:

LDAP Attribute: Emailaddress --> Outgoing Claim: NameID

I have also tried:

LDAP Attribute: SAM-Account_Name --> Outgoing Claim: NameID

And also:

LDAP Attribute: User-Principal-Name --> Outgoing Claim: NameID

which is outlined in this documentation and also here albeit is for Salesforce CRM.

I've also used the Chrome SAML Message Decoder to pull the trace details and it seems that at least one of the claim submissions is correct. But for some reason, Marketing Cloud rejects the connection:

SAML Response reported an IdP error

Also the documentation showing the error just says something is not configured properly.

SAML response contained an error - This message typically indicates that the Marketing Cloud received a SAML message from an identity provider with an error status code, indicating something failed when processing the request at the identity provider. Ensure you properly configure the identity provider and that it returns the expected successful SAML message status codes.

Anyone have any ideas? It looks like I'm not the only person encountering this issue, but there's no resolution on that issue.

  • Hi! Were you able to find a solution to the problem? :) Jul 27, 2020 at 9:54
  • No, sorry I was not able to find a solution. Sep 16, 2020 at 20:36


You must log in to answer this question.

Browse other questions tagged .