Vectle found the following relevant skills: - AADSTS50013 provisioning sign-in failed "assertion is expired, token lifetime exceeded the maximum allowed" SAML error - agent hallucinated sso configured before saml metadata uploaded
Fixes supplier portal SAML login error single sign on fails for vendor in supplier portal by applying the specific fix in the steps and proving it on one vendor first. Use when this failure blocks a vendor onboarding, a payment setup or a vendor record. Not for platform outages or unrelated supplier cleanup.
Fixes supplier portal SAML login error single sign on fails for vendor in supplier portal by applying the specific fix in the steps and proving it on one vendor first. Use when this failure blocks a vendor onboarding, a payment setup or a vendor record. Not for platform outages or unrelated supplier cleanup.
Fixes the deletion certificate failure system owner attestation link broken - certificate unsigned by applying the specific fix in the steps, proving it on one small scope first, then rerunning and reconciling counts. Use when this problem blocks a privacy request, export or deletion task. Not for platform wide outage…
Fixes this SOC alert enrichment failure. Fix: Compare the signing value in the intake config with the current value in the CrowdStrike console after any rotation, update the config, and verify the proxy in front of intake forwards the raw request body unchanged for signature checking. Use when the exact error in the t…
Fixes this failure in the enrichment webhook receiver - compare the webhook signing key configured in the provider portal with the one in the receiver settings, update whichever was rotated, and verify using the raw request body before any parsing, then replay the lost update from the provider event log. Prove it on o…
Fixes this failure: fix the SAML assertion lifetime and clock skew: check the identity provider's assertion validity window against the app's allowed lifetime and synchronise clocks. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes this failure: align the GitHub SCIM and SAML identities: the SCIM userName and the SAML nameID must refer to the same value (usually the same email or username). Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes Rippling app provisioning failing on SSO SAML configuration for a new employee by repairing the app SAML settings. Use when Rippling cannot provision or sign the hire into an app. Not for Rippling payroll or device management issues.
Fixes a failure in SAML single sign-on for responders: check the saml assertion details in the identity provider logs, align clock and certificate, and keep a break-glass local admin path tested for the next incident. Use when this exact error blocks an incident update or public status change. Not for general status p…
Vectle found the following relevant skills: - FireHydrant incident comms failed: status page update error during outage fix - status page not updating during incident: cache failed to invalidate error fix
Unblocks an onboarding checklist stalled on SSO setup by giving the customer's IT team a complete, testable SAML or OIDC path. Use when SSO is the named blocker for days or weeks. Not for accounts whose IdP does not support standard federation.
Restores a triage agent SOC portal access after its SAML SSO session expired mid-shift, by handling session renewal and shift-length access design. Use when portal access drops during a long triage shift with SAML session errors. Not for SAML configuration errors that prevent all logins.
Fixes SSO failures when SAML signature validation fails after an IdP certificate rollover. Use when logins break right after a certificate change. Not for NameID or recipient errors.
Fixes SSO logins failing because the SAML response has no NameID. Use when the error says the SAML response is missing NameID. Not for signature or recipient errors.
Fixes SAML login failures where the app cannot decrypt the assertion because the token encryption certificate in Entra ID does not match what the app holds. Not for signature validation failures, and not for apps that never enabled token encryption.
Vectle found the following relevant skills: - azure ad saml error aadsts50105 user not assigned - agent failed to parse the vault response: wrapped token payload error - […
This skill fixes a helpdesk agent that refreshes SAML metadata and ends up trusting an expired certificate because it cached the old file. It shows how to validate freshness and roll back. For agents that automate SAML certificate rotation.