SAML authentication with ADFS not working

Question

Hello guys! 
 I&rsquo;m writing in reference to the SAML authentication in Appian. I&rsquo;ve trying to set it up on our environment using a ADFS from Microsoft. I am having some trouble to make it work; all the configuration is apparently well done in Appian, I have the metadata and the certificate. When I try to sing in, Appian takes me successfully to the sing in page of the ADFS, however there&rsquo;s an error that stops me from going further. I&rsquo;ve double checked the configuration from the ADFS trying to see if there is some missing parameters or configuration but there&rsquo;s no success either. 
 I am posting some screens of my configuration in Appian and the error I&rsquo;m getting while trying to sign in, hoping there&rsquo;s something to do or to see if there&rsquo;s any advice you could give me. Thanks in advance!! 
 
 The error: 
 
 My configuration in Appian:

Thanks again!

Sandeep Deshmukh · Answer

Hi Samuel Torrero , 
 
Configuration seems okay only. Can you try with below mentioned options : 
1) For testing, remove authentication group (not required) 
2) try with Authentication menhod : "urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified." 
3) login user present in AD as well as in Appian. 
 
Thanks, 
Sandeep Deshmukh

ravalik · Answer

Hi samuelt0001, 
 
Try these links, 
 docs.appian.com/.../Appian_Administration_Console.html 
 docs.appian.com/.../SAML_for_Single_Sign-On.html 
 
Thanks, 
ravalik

Sandeep Deshmukh · Answer

Hi Samuel Torrero (samuelt0001) ,

I hope "Service Provider Identity Id" i.e "testingitdemo" you have shared with your SSO team (those who gave you Identity Provider Metadata). Please check this.
While generating .pem file you have mentioned some password, make sure you are useing same password here as well "Service Provider Signing Certificate Password".

Please check above mentioned 2 points only.

Thanks,
Sandeep

Sandeep Deshmukh · Answer

Hi Samuel Torrero , 
 
If I am correct here, the error is related to Signature. Can you please regenerate .pem certificate with password. 
And also please try to hit your federation url in your chrome browser. 
 
Thanks, 
Sandeep

Sergio Blazquez · Answer

Hello: 
 
I rebember a couple of things when I was configuiring SAML + ADFS with Appian. 
Have you tried checking the option "Identity Provider uses NTLM Authentication" and selecting Authentication Method as "None"? 
 
I did that and solved a problem similar to yours

Sandeep Deshmukh · Answer

Samuel Torrero , 
 
Hope you have shared your Generated metadata xml file with your Identity provider for relying trust. 
 
Thanks, 
Sandeep