Error: invalid_response, SAML Response must contain 1 assertion - WAYFless URL

[Cantor, Scott]

> But when going to it, the following is presented:
> 
> "Error: invalid_response, SAML Response must contain 1 assertion"

Well, what is your IdP actually returning to it? You seem to have omitted that. If you're saying you just get that error immediately with no IdP interaction, I'd say that's a question for the vendor.

> The provider has given us the EntityID, SSO URL and SSO Binding that they
> used to configure the URL and they all match with our IDP - is there any
> other configuration required in our IDP to enable us to connect to WAYFless
> URLs?

There is no such thing in SAML, that's just a way of describing particuarly kinds of flows that don't involve IdP discovery. The IdP has no idea what that concept even is, it simply responds to requests using the profiles it supports.

-- Scott