Question4Replies2050Views Jaga_Pega Member since 2013 53 posts Bank of America Posted: 1 year agoLast activity: 11 months 2 weeks ago Solved Enable operator provisioning using model operator is not working in SAMLSSO Pega 8.1Enable operator provisioning using model operator is not working in SAMLSSO Pega 8.1.- It's working fine if the operator ID is already present in system.- It's failing for new user.SAML response looks good.Below message is showing in browser once it returned from IDP"No failure response set by custom authentication activity"Below is the log printed for same2018-09-10 12:40:59,661 [http-nio-8080-exec-9] [ STANDARD] [ ] [ ] ( sso.saml.SAMLResponseHandler) ERROR |127.0.0.1|RelayStateID: eafa6386-7874-4641-a626-de50b45cff2f :RelayStateID - Failed while executing the SAML auth flow. com.pega.pegarules.pub.PRRuntimeException: Unable to derive attribute (CSModelOperator) from SAML assertion for operator establishment***Updated by moderator: Lochan to remove PI*** Security ×Close popoverFacebookTwitterLinkedinEmail Copy Link Copied! Posted: 1 year agobagas PEGA replied to Jaga_PegaHi, Looks like it is failed to create new operator from the given model operator. Do you have a model operator configured? How did you configure it in the Auth service rule form ? Thanks, Santhosh Posted: 1 year agoKanneesh Accenture Technology Solutions Pte Ltd replied to Jaga_PegaHi pandj, Did you map your Identity provider attributes with PEGA attributes on your SAML authentication service --> "Mapping" tab. I mapped uid <-> .pyUserIdentifier where uid is my Identity provider attribute and .pyUserIdentifier is the OOTB PEGA attribute. You need to track if "uid" is part of your SAML payload. Accepted Solution Posted: 1 year agoJaga_Pega Bank of America replied to Jaga_PegaAfter passing model operator id in double quote ("CSModelOperator") solved my issue. Posted: 11 months agoPrameelaM0555 Scope International replied to Jaga_PegaUseful info.