Documentation

The response indicates success!

The request could not be performed due to an error on the part of the requester.

The request could not be performed due to an error on the part of the SAML responder or SAML authority.

The SAML responder could not process the request because the version of the request message was incorrect.

The responding provider was unable to successfully authenticate the principal.

Unexpected or invalid content was encountered within a <saml:Attribute> or <saml:AttributeValue> element.

The responding provider cannot or will not support the requested name identifier policy.

The specified authentication context requirements cannot be met by the responder.

Used by an intermediary to indicate that none of the supported identity provider <Loc> elements in an <IDPList> can be resolved or that none of the supported identity providers are available.

Indicates the responding provider cannot authenticate the principal passively, as has been requested.

Used by an intermediary to indicate that none of the identity providers in an <IDPList> are supported by the intermediary.

Used by a session authority to indicate to a session participant that it was not able to propagate logout to all other session participants.

Indicates that a responding provider cannot authenticate the principal directly and is not permitted to proxy the request further.

The SAML responder or SAML authority is able to process the request but has chosen not to respond. This status code MAY be used when there is concern about the security context of the request message or the sequence of request messages received from a particular requester.

The SAML responder or SAML authority does not support the request.

The SAML responder cannot process any requests with the protocol version specified in the request.

The SAML responder cannot process the request because the protocol version specified in the request message is a major upgrade from the highest protocol version supported by the responder.

The SAML responder cannot process the request because the protocol version specified in the request message is too low.

The resource value provided in the request message is invalid or unrecognized.

The response message would contain more elements than the SAML responder is able to return.

An entity that has no knowledge of a particular attribute profile has been presented with an attribute drawn from that profile.

The responding provider does not recognize the principal specified or implied by the request.

The SAML responder cannot properly fulfil the request using the protocol binding specified in the request.

The SAML2 specification notes that a status code value can be any valid URI and that additional subordinate status codes may be introduced in the future.