Skip to main content

SAML configuration error: There is no AttributeStatement on the Response

When configuring SAML single sign-on (SSO) in Semgrep Cloud Platform, you may encounter the following error: There is no AttributeStatement on the Response

SAML AttributeStatement error

This error occurs when an attribute within the SAML response does not contain a value, resulting in a SAML assertion that does not correctly close the attribute statement. The attribute statement causes an SSO error when the service provider (SP) receives the SAML response.

Find the SAML attribute that is causing the error

  1. If you do not know the attribute that is causing the error, you can identify it by investigating the payload.

  2. Once you have identified the attribute in question, there are two ways for you to fix the issue. The best option depends on what information your SP expects to receive:

    • If your SP anticipates a value for the specific SAML attribute statement, you must add the value within your SAML settings. When setting up SSO to Semgrep Cloud Platform, you must provide name and email.
    • If your SP does not expect the attribute statement in your SAML settings, you can remove it.

    Regardless of which option you choose, you can update or remove SAML attribute statements with your identity provider (IdP); check with your IdP for instructions on how to do so.

Not finding what you need in this doc? Ask questions in our Community Slack group, or see Support for other ways to get help.