Skip to main content

SAML SSO error: There is no AttributeStatement on the Response

When configuring SAML single sign-on (SSO) in Semgrep AppSec Platform, you may encounter the following error: There is no AttributeStatement on the Response

SAML AttributeStatement error

This error occurs when an attribute within the SAML response does not contain a value, resulting in a SAML assertion that does not correctly close the attribute statement. The attribute statement causes an SSO error when the service provider (SP) receives the SAML response.

Find the SAML attribute that is causing the error​

  1. If you do not know the attribute that is causing the error, you can identify it by investigating the payload.
  2. Once you have identified the attribute in question, there are two ways for you to fix the issue. The best option depends on what information your SP expects to receive:
    • If your SP requires a value for the specific SAML attribute statement, you must add the value in the IdP. When setting up SSO to Semgrep AppSec Platform, you must provide name and email.
    • If your SP does not expect the attribute statement in your SAML settings, you can remove it.

Regardless of which option you choose, you can update or remove SAML attribute statements using your identity provider (IdP). Reach out to your SSO administrator or your IdP for instructions.

Not finding what you need in this doc? Ask questions in our Community Slack group, or see Support for other ways to get help.