SSO and ADFS

We have one user who is getting an error while he tries to access Marketo production environment by using SSO link. Error message: Error processing SAML message. Request was ill-formed in some way.

Does anyone know why this error occurs?

Hi

I got it to work after struggling for 12 hours . I can help you If you still need help.
The documentation form Marketo is not very helpful .

Br.

Ivo Hanbeukers

Hi,

We've been struggling with our SSO implementation as well and haven't had any support from Marketo. If someone can post the steps, that would be much appreciated!

Regards,

Patsy

Hi, I will describe the steps which I did.

If you still have problems you can contact me directly: ivo.hanbeukers@rockwool.com

In Marketo go to the SSO Settings

Enable SAML Sngle Sign-On

Issuer ID and Entity ID are the same in my configuration: sts.youradfsserver.com/adfs/services/trust

User ID Location: In Name identifier element of Subject

Name Id Format: urn:oasis:names:tc:SAML:1.1:nameid-format:email

Identity Provider Certificate.: Upload here your certificate from your ADFS server.

Go now to your AFS Server and create a new Relying Party Trust

Enter the data about the relying party manually

Give it a name

Select all the
default settings except for:

Configure URL

Select Enable support for the SAML 2.0 Web SSO protocol

Enter the url:  login.marketo.com/saml/assertion/Munchkin Account ID

you can find your Munchkin Account ID in Marketo un intergration -> Munchkin

On the next screen you have to enter the relying party trust identifier: saml.marketo.com/sp

On the claim rules window add a rule

Use the claim rule template: Send LDAP Attribute as Claims

Give it a name

Attribute store: Active directory

LDAP Attribute = E-mail-address (This can be different for you depending on the login name you use in Marketo)

Outgoing Claim Type must be: Name ID

Good luck

Ivo Hanbeukers