"Wrong Email or Password" Error when Configuring a SAML Service Provider

This article explains the following error that occurs when configuring a Security Assertion Markup Language (SAML) Service Provider:

Wrong email or password

• SAML SP
• Auth0
• SAML2 Web App add-on

This issue occurs because the user does not exist in Auth0.

This error occurs during the configuration of a SAML Service Provider (SP), where Auth0 acts as the Identity Provider (IdP). The authentication flow proceeds as follows:

1. The user attempts to access the SP.
2. The SP redirects the request to Auth0 for authentication.
3. Auth0 prompts the user for credentials.
4. Auth0 attempts to verify the provided credentials against the configured Database connection.

The flow is blocked at step 4. Because the user record does not exist in the Auth0 Database connection, Auth0 cannot verify the identity. To protect user privacy, Auth0 returns the generic Wrong email or password error message instead of indicating that the account does not exist.

1. Create the user in the Database connection enabled for the application where the SAML2 Web App add-on is enabled.
2. Sign in to the application to verify the resolution.