Resolving the error SAML assertion attribute limit exceeded. Please contact your administrator
Issue description
The error SAML assertion attribute limit exceeded. Please contact your administrator occurs when a user attempts to log in to a SAML application via ADSelfService Plus.
Possible cause
- The total number of attributes or attribute length in the SAML assertion exceeds the default allowed limit.
Resolution
- By default, ADSelfService Plus allows up to 100 attributes in a SAML assertion. This error occurs when the attribute count or size exceeds that limit. If additional attributes are required, contact ADSelfService Plus support to request a configuration change that increases the limit.
How to reach support
New to ADSelfService Plus?
Related Articles
Resolving the error "Login failed due to an error with code – SAML_ERR_001. Please reach out to your administrator to resolve this"
Issue description The error message Login failed due to an error with code – SAML_ERR_001. Please reach out to your administrator to resolve this occurs when ADSelfService Plus receives an invalid, malformed, or incomplete SAML response from the IdP ...Error: Permission denied. Please contact your administrator
Issue description Users may encounter the error message "Permission denied. Please contact your administrator" when attempting to: Log in to the ADSelfService Plus portal for enrollment. Perform a password reset or account unlock. This error prevents ...Error: Login failed due to an error with code – SAML_ERR_002. Please reach out to your administrator to resolve this.
Issue description The error Login failed due to an error with code – SAML_ERR_002. Please reach out to your administrator to resolve this. occurs when a user tries to log in to ADSelfService Plus through a third-party identity provider (IdP). ...Error: Unable to login. Multiple user accounts are mapped for the same login attribute. Please contact your administrator
Issue description Users encounter the error message "Unable to login. Multiple user accounts are mapped for the same login attribute. Please contact your administrator" during ADSelfService Plus login. Possible causes Duplicate email addresses: Two ...Error: Your account has expired. Please contact your administrator
Issue description Users encounter the error message "Your account has expired. Please contact your administrator" when logging in to ADSelfService Plus. Possible cause The AD user account has expired. Prerequisite Administrative access to AD. ...