CHW-5711 SAMLServiceProviderMisconfigured
SAML service-provider configuration could not be built; verify the SP keypair and ACS/metadata URLs in the SSO admin UI, then retry
Default message: SAML service-provider configuration could not be built; verify the SP keypair and ACS/metadata URLs in the SSO admin UI, then retry
HTTP status:500(server)
Problem. A SAML admin endpoint (/init, /acs, /metadata)
returned 500 because the Service Provider side of the config was
malformed. Cause. buildSAMLServiceProvider could not assemble the
crewjam/saml SP from local config — typically the SP keypair is missing
or malformed, the ACS / metadata URL did not parse, AuthnRequest /
Redirect construction failed, or the metadata XML marshaller rejected
the SP document. IdP-reachability failures are reported as
CHW-3703 instead, so this code narrows to problems an operator
fixes in the SSO admin UI rather than on the IdP side. Fix.
Regenerate the SP keypair via the SSO admin UI, confirm the ACS and
metadata URLs resolve, and retry. HTTP 500.