catalyst / moodle-auth_saml2

SAML done 100% in Moodle, fast, simple, secure
https://moodle.org/plugins/auth_saml2
70 stars 132 forks source link

SAML2 Exception Responder #731

Open FFawzy opened 1 year ago

FFawzy commented 1 year ago

What happened? SAML2 Exception Responder

I have read the previous issues about the "Responder" error and the fact that it means that it is caused by the IdP. in my case the Responder error is on purpose, I'm setting up my SSO to block a user that has no verified email so actually the error is correct. my question here is related to the error message. in all the other applications that I connected my SSO to when I deny access to the user the application displays the "Responder" status message that I sent back (for example "please verify your email to login")

in my case, I don't see an error message, I just see the Responder error. (check image below)

I even checked the saml xml response sent from the IdP and it contained the message as so

<samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"/><samlp:StatusMessage Value="Please verify your email before logging in."/></samlp:Status>

Screenshot 2022-10-19 at 5 50 16 pm

What you expected: I expected this message to be shown

SAML2 exception: Responder: Please verify your email before logging in