# SAML assertion error

**URL:** <https://community.dynatrace.com/t/saml-assertion-error/12423>\
**Category:** Open Q&A\
**Tags:** sso\
**Created:** [June 6, 2018, 7:24pm UTC](https://community.dynatrace.com/t/saml-assertion-error/12423 "2018-06-06T19:24:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![alex\_pb](https://avatars.discourse-cdn.com/v4/letter/a/ea5d25/32.png) [@alex\_pb](https://community.dynatrace.com/u/alex_pb)\
**Post date:** [June 6, 2018, 7:24pm UTC](https://community.dynatrace.com/t/saml-assertion-error/12423/1 "2018-06-06T19:24:08Z")

</div>

Hello,

I am trying to setup SAML SSO authentication in Dynatrace. Currently I am getting this error

2018-06-06 19:17:18 UTC SEVERE [\<default,0x1,node01q5pq\>] [SsoAuthenticatedStateSAML] Invalid SAML response: Could not decrypt SAML assertion  
s: Missing subnode \<NameID\>  
com.compuware.apm.sso.saml.common.exception.InvalidSamlDocumentException: Could not decrypt SAML assertions: Missing subnode \<NameID\>  
at com.compuware.apm.sso.saml.common.SamlResponse.processAssertions(SamlResponse.java:157)  
at com.compuware.apm.sso.saml.common.SamlResponse.\<init\>(SamlResponse.java:56)

Does anybody knows what we are missing? Is there a sample of a valid SAML assertion response?

Thanks.

Alex

---

<div class="post-metadata">

**Author:** ![alex\_pb](https://avatars.discourse-cdn.com/v4/letter/a/ea5d25/32.png) [@alex\_pb](https://community.dynatrace.com/u/alex_pb)\
**Post date:** [June 6, 2018, 9:01pm UTC](https://community.dynatrace.com/t/saml-assertion-error/12423/2 "2018-06-06T21:01:53Z")

</div>

Update: The error above was due to spacing in the returning SAML ‘Name Id’ attribute. Removed space and authentication worked.