Skip to content

Latest commit

 

History

History
40 lines (14 loc) · 1.4 KB

inresponsetofield-of-response-doesn-t-correspond-to-the-sent-message-e73f40d.md

File metadata and controls

40 lines (14 loc) · 1.4 KB

InResponseToField of Response Doesn‘t correspond to the Sent Message

Symptom

When the user tries to log on with SAML or by refreshing the session, they see the InResponseToField of Response doesn‘t correspond to the sent message error.

Reason and Prerequisites

This error occurs when handling an authentication response without a known corresponding request; for example, as the consequence of a session timeout. The timeout is a safeguard for performance and security reasons.

Solution

Don't delay the logon action

Ensure that the user login is within the timeframe of 15 minutes.

Check the identity provider

The identity provider may be out of sync; or if it consistently takes a long time to issue the authentication response, reduce this time and check.

Check the audit log

Check the audit log for the AuthnRequest expired - ID: <RequestId> Destination: <IdPDestination> error. If you find this error message, refer to AuthnRequest expired - ID: <RequestId> Destination: <IdPDestination>.

For more information about the audit log, refer to Auditing and Logging Information for SAP Authorization and Trust Management Service - SAP Help Portal.