You are currently reviewing an older revision of this page.

KB-XXXX: No EntityDescriptor found when setting up SalesForce as an Identity Provider

Symptoms

When attempting to upload the Identity Provider metadata into the Appian Admin Console as part of setting up SAML, the error "No EntityDescriptor found. IdP metadata must include one <EntityDescriptor> element" is displayed.

Cause

SalesForce can act as both a Service Provider and an Identity Provider in the context of a SAML exchange. In order to configure SAML in Appian, the Identity Provider metadata must be uploaded into the Admin Console. The error is generated when instead, the Service Provider metadata is uploaded into the Admin Console.

Action

Check the metadata xml file for the existence of an IDPSSODescriptor element. If this is present, the file is the Identity Provider metadata file and these instructions don't apply.

Check the metadata xml file for the existence of an SPSSODescriptor element. If this element is present, you are attempting to upload the Service Provider metadata file instead of the expected Identity Provider metadata file. You will need to download the Identity Provider metadata from SalesForice, and upload that file to the Admin Console instead.

Affected Versions

This article applies to all version of Appian using SalesForce for SAML authentication.

Last Reviewed: January 2020