ADFS SAML setup failing with prefix match error

ℹ️ Support
, , ,
1

I have searched on this site for my issue but for some reason there are solutions but none that address either how my configuration gui looks or where to put things. We are running this as a docker compose container.

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart:

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 31.0.4
  • Operating system and version (e.g., Ubuntu 24.04):
    • Linux Debian Bullseye
  • Web server and version (e.g, Apache 2.4.25):
    • Apache 2.4
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • nginx 1.18.0
  • PHP version (e.g, 8.3):
    • Php 8.3.20
  • Is this the first time you’ve seen this error? (Yes / No):
    • repeatable
  • When did this problem seem to first start?
    • just setting up new server so right away
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • Docker container
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

I am guessing that my issue is the ADFS acs response. The metadata from my Nextcloud server is showing http yet I can’t add a http in ADFS. I can only ad https. I saw the Service Provider EntityID and tried putting the https url in there but it still won’t work.

The error I am having is showing in the browser and is the following:

" * Activity ID: 676ecfeb-a618-46e7-2502-0040020000e3

  • Relying party: Nextcloud
  • Error details: MSIS3200: No AssertionConsumerService is configured on the relying party trust ‘https://transfer.ournetwork.net/apps/user_saml/saml/acs’ that is a prefix match of the AssertionConsumerService URL ‘404 Error’ specified by the request.
  • Node name: fb1f37b3-23c3-4aac-b5a2-71b52b4203f3
  • Error time: Thu, 22 May 2025 18:03:15 GMT"

I have spent almost a week at times trying new things. We had to recreate the entire site due to trying to update it and the original broke. If anyone can help us get that one fixed that would be preferred. It just says that an update is needed but there is no way to do it and that the web update is disabled. Even when I try and reenable it it doesn’t work.

Steps to replicate it (hint: details matter!):

  1. Connect to server and click on access method
  2. type in username/password after it goes to our ADFS server page
  3. Error occurs

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.


No error logs generated on nextcloud at all. It looks like it is something on the ADFS side as that is what that error is from. 

#### Web Browser

If the problem is related to the Web interface, open your browser inspector *Console* and *Network* tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.

PASTE


#### Web server / Reverse Proxy

The output of your Apache/nginx/system log in `/var/log/____`:

PASTE HERE



### Configuration
 
#### Nextcloud

The output of `occ config:list system` or similar is best, but, if not possible, the contents of your `config.php` file from `/path/to/nextcloud` is fine (make sure to remove any identifiable information!):

PASTE HERE


#### Apps

The output of `occ app:list` (if possible).

### Tips for increasing the likelihood of a response

* Use the `preformatted text` formatting option in the editor for all log entries and configuration output.
* If screenshots are useful, feel free to include them. 
  - If possible, also include key error output in text form so it can be searched for.
* Try to edit log output only minimally (if at all) so that it can be ran through analyzers / formatters by those trying to help you.