This article provides information about attempting to log in to JupiterOne from the Okta dashboard and receiving the following error:
Invalid SAML response or relayState from identity provider
- Custom SAML app for JupiterOne
- Single Sign On (SSO)
The error appears because JupiterOne does not currently support IdP-initiated flow, as specified in the Setup SSO guide. To learn more about when it might be supported, contact JupiterOne Support.
Okta does provide a solution that allows the simulation of the IDP-initiated login flow. This solution involves creating a Bookmark Application in Okta. This technique is used to simulate an Identify provider-initiated login (Okta Dashboard) by still utilizing the service provider-initiated login flow that JupiterOne has been designed to accept.
Refer to this Okta documentation for detailed step-by-step instructions on how to set up and use a Bookmark Application within Okta.
