Unverified50% confidenceFactExact time
The SAML assertion consumer service endpoint (ACS URL) must exactly match the receiving endpoint configured on the SP side, including protocol (usually https), domain, port, and path; any character difference will cause the assertion to fail to be delivered or to be rejected by the SP.
1
Sources
50%
Confidence
Long-term
Relevance
11/4/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSAML conveys user identity and attributes in an XML-format assertion, which is usually signed by the IdP and pushed to the SP via the browser POST binding, and the SP must verify the signature and check conditions such as validity period and audience.73% similarUnverifiedIn a SAML assertion, the email verification status may be expressed through an attribute statement or AuthnContext.62% similarVerifiedSPF通过DNS TXT记录声明哪些IP地址被授权代表某域名发送邮件60% similarUnverifiedA SAML response is digitally signed XML, and its signature verification and identity attribute extraction often use different XML parsers, different XPath expressions or different namespace handling, causing parser differential inconsistency.59% similarUnverifiedAfter successful just-in-time provisioning, the binding between a stable identifier on the identity provider side (such as the OIDC sub or the SAML NameID) and the local user should be stored, to avoid re-matching by email on every login.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1134551API
curl https://kongchang.com/api/v1/knowledge/claims/1134551MCP
get_claim(id=1134551)