Troubleshoot login errors with Single Sign-on (SSO). In some cases, your administrator or IT team may be able to diagnose and fix the issue. Contact the support team at support@elevensoftware.com for assistance at any time if you cannot find a solution.
Troubleshooting Error Messages
Errors can share the same HTTP code but include different error messages. If possible, use the error code and the message to diagnose the solution with the table below:
| HTTP Code | Error Message | Solution |
|---|---|---|
| 400 | We could not log you in with SSO. The email address you entered may be incorrect or your organization may not be configured for SSO. Please try again or log in with a username and password. | Verify that your organization is configured for SSO into ElevenOS and the IdP claim is passing the correct email address for the user. |
| 307 | Missing required IdP claims. | Verify that the IdP claim is passing all of the required information to ElevenOS during SSO authentication. See the required information here. |
| 307 | Invalid IdP claim for org number. | Verify that the IdP claim contains the correct Org number in the orgNumber field. |
| 307 | Eleven cannot authorize this user for the IdP given org. | Verify that the IdP claim is passing the correct Org number for the given user. |
| Unable to find role template identified in SSO claim. | Verify the role template exists in the given Org. | |
| 307 | There was an error logging in with SSO. | Contact support@elevensoftware.com. Please provide the HTTP code, error message, and relevant user and Org details. |
| 307 | Could not create member. | Contact support@elevensoftware.com. Please provide the HTTP code, error message, and relevant user and Org details. |
| 200 | Failed to find SSO IdP configuration. |
Contact support@elevensoftware.com. Please provide the HTTP code, error message, and relevant user and Org details. |
| 200 | There was an error logging in with SSO. |
Contact support@elevensoftware.com. Please provide the HTTP code, error message, and relevant user and Org details. |
| Role template assignment is invalid at the selected organization. |
Verify that the IdP claim is passing a role that is configured in the given Org. |
Reusing Usernames
If you remove a user that was created via SSO, the username associated with that user cannot be reused for approximately 24 hours due to system maintenance. After that time has passed, the username should be available as expected.