Troubleshooting Tip: Unable to authenticate using SAML and binding error

When using SAML to authenticate, the user may receive the following error:

This error is generally seen when there are changes made on the IDP and the same time user tries to authenticate, due to caching of previous session in the browser, user would get the error. 

Resolution:

Clear the browser cache and then attempt to login. 

If the user still unable to authenticate, then collect debugs and open a ticket with TAC.

FortiGate Debug Commands (run them in the CLI while reproducing the issue):

diagnose debug reset diagnose debug console timestamp enable diagnose debug application samld -1 diagnose debug application httpsd -1    diagnose debug application fnbamd -1    diagnose debug enable

diagnose debug disable  diagnose debug reset