Please log in and try again." "This account cannot be accessed because the login credentials could not be verified." This error indicates a problem with the certificates that you are using to sign the authentication flow. For authentication to complete successfully, the exact RelayState must be returned in the saml Response. In your Apps Control Panel, access your SSO setup page by navigating to Advanced Tools Set up single sign-on. "The required response parameter RelayState was missing". Diagnose this issue further by capturing http headers during a login attempt. Reviews, add to Collection, add to Wantlist Remove from Wantlist. Within the enterprise, middleware applications integrate the front-end and back-end applications. Element Audience Description URI that identifies the intended audience which requires the value of ACS URI. Check the following table for descriptions and examples for each element. Extract the saml Request and Response from the http headers. Examining your saml Request and Response (obtained from http header logs captured during a login attempt) can help you debug this further. Ensure that the Recipient value in the saml Response exists and that it matches the value in the saml Request. This is done through the use of password synchronization adapters, which you can configure and manage using the Password Synchronization tools. Re-sync the Identity Provider server clock with a reliable internet time server. The SSO database is the SQL Server database that stores the information about the affiliate applications, as well as all the encrypted user credentials to all the affiliate applications.