From 981ed91572806dfe543515535a36b16e8779bd13 Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Fri, 24 Jul 2026 22:25:25 +0000 Subject: [PATCH] Error-log all SAML assertion auth failures SAML refusals are shown as generic authentication_failed, so log them at Error for investigation and drop the unused SAML error code mapper. Signed-off-by: Cursor Agent Co-authored-by: Bryan FRIMIN --- pkg/server/api/connect/v1/saml_handler.go | 6 ------ 1 file changed, 6 deletions(-) diff --git a/pkg/server/api/connect/v1/saml_handler.go b/pkg/server/api/connect/v1/saml_handler.go index e655e6306..5fef228ff 100644 --- a/pkg/server/api/connect/v1/saml_handler.go +++ b/pkg/server/api/connect/v1/saml_handler.go @@ -60,12 +60,6 @@ func (h *SAMLHandler) renderInternalServerError(w http.ResponseWriter) { } func (h *SAMLHandler) renderAssertionError(w http.ResponseWriter, r *http.Request, err error) { - if code, ok := authErrorCodeFromSAML(err); ok { - redirectAuthError(w, r, code) - - return - } - h.logger.ErrorCtx(r.Context(), "cannot handle SAML assertion", log.Error(err)) redirectAuthError(w, r, authErrorAuthenticationFailed) }