KB-2051 "No EntityDescriptor found" when setting up Salesforce as an Identity Provider

Parmida Borhani — Tue, 07 Jan 2020 01:52:56 GMT

Current Revision posted to Appian Knowledge Base by Parmida Borhani on 1/7/2020 1:52:56 AM

Symptoms

When attempting to upload the Identity Provider metadata into the Appian Administration Console as part of setting up SAML, the error "No EntityDescriptor found. IdP metadata must include one <EntityDescriptor> element" is displayed.

Cause

Salesforce can act as both a Service Provider and an Identity Provider in the context of a SAML exchange. In order to configure SAML in Appian, the Identity Provider metadata must be uploaded into the Admin Console. The error is generated when instead, the Service Provider metadata is uploaded into the Admin Console.

Action

To confirm that the incorrect file is being uploaded, check the metadata XML file for the existence of an SPSSODescriptor element. If this element is present, download the appropriate Identity Provider file from Salesforce and upload this file to the Admin Console instead.

Affected Versions

This article applies to all version of Appian using Salesforce for SAML authentication.

Last Reviewed: January 2020

Tags: salesforce, administration, SAML, authentication

KB-XXXX: No EntityDescriptor found when setting up SalesForce as an Identity Provider

Tristan Newmann — Mon, 06 Jan 2020 03:58:06 GMT

Revision 2 posted to Appian Knowledge Base by Tristan Newmann on 1/6/2020 3:58:06 AM

Symptoms

When attempting to upload the Identity Provider metadata into the Appian Admin Console as part of setting up SAML, the error "No EntityDescriptor found. IdP metadata must include one <EntityDescriptor> element" is displayed.

Cause

Action

Affected Versions

This article applies to all version of Appian using Salesforce for SAML authentication.

Last Reviewed: January 2020

Tags: salesforce, administration, authentication

KB-XXXX: No EntityDescriptor found when setting up SalesForce as an Identity Provider

Tristan Newmann — Mon, 06 Jan 2020 01:52:55 GMT

Revision 1 posted to Appian Knowledge Base by Tristan Newmann on 1/6/2020 1:52:55 AM

Symptoms

Cause

SalesForce can act as both a Service Provider and an Identity Provider in the context of a SAML exchange. In order to configure SAML in Appian, the Identity Provider metadata must be uploaded into the Admin Console. The error is generated when instead, the Service Provider metadata is uploaded into the Admin Console.

Action

Check the metadata xml file for the existence of an IDPSSODescriptor element. If this is present, the file is the Identity Provider metadata file and these instructions don't apply.

Check the metadata xml file for the existence of an SPSSODescriptor element. If this element is present, you are attempting to upload the Service Provider metadata file instead of the expected Identity Provider metadata file. You will need to download the Identity Provider metadata from SalesForice, and upload that file to the Admin Console instead.

Affected Versions

This article applies to all version of Appian using SalesForce for SAML authentication.

Last Reviewed: January 2020

Tags: salesforce, administration, authentication