Incoming SAML message is not properly formatted, or has elements which are missing or invalid.
Reason: SAML response reported an IdP error.
We're using the correct version of SAML and tried a few Claim Rules of:
LDAP Attribute: Emailaddress --> Outgoing Claim: NameID
I have also tried:
LDAP Attribute: SAM-Account_Name --> Outgoing Claim: NameID
LDAP Attribute: User-Principal-Name --> Outgoing Claim: NameID
I've also used the Chrome SAML Message Decoder to pull the trace details and it seems that at least one of the claim submissions is correct. But for some reason, Marketing Cloud rejects the connection:
Also the documentation showing the error just says something is not configured properly.
SAML response contained an error - This message typically indicates that the Marketing Cloud received a SAML message from an identity provider with an error status code, indicating something failed when processing the request at the identity provider. Ensure you properly configure the identity provider and that it returns the expected successful SAML message status codes.
Anyone have any ideas? It looks like I'm not the only person encountering this issue, but there's no resolution on that issue.