WebEx Messenger SAML error code 31 when auto creating user

[jacovmosto]

Hi

When attempting to auto create a user in WebEx Messenger with our SAML IdP, we receive the following error message:

<federatedSSO><title>Connect Client Single Sign On</title><status>FAILURE</

status><errorcode>31</errorcode><reason>Auto Account Creation failed.</reason></federatedSSO>

Looking at Knowledge Base - My Resources and Knowledge Base - My Resources, we have double-checked and there is no existing user with the same email address.

So it seems WebEx Messenger is expecting an attribute which the SAML IdP is not sending over. Although it does include the uid, firstname, lastname and email - which are the required fields according to Cisco documentation.

This is what our IdP sends over:

   <saml:AttributeStatement>

      <saml:Attribute Name="uid">

        <saml:AttributeValue>

B99999998</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="email">
        <saml:AttributeValue>B99999998@studentmail.[ourdomain].ac.uk</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="firstname">
        <saml:AttributeValue>Webex Changed</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="lastname">
        <saml:AttributeValue>Test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="Generator">
        <saml:AttributeValue>nlib</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>

Any ideas where the issue may be?

Thank you

Jacov

[nate.zimmerman]

I'm experiencing the same issue. We've verified that the required SAML attributes are being sent and still get the error 31.

Were you able to find a solution?

[larry.wolfe]

You have exceeded your license allocation. Deactivate unused accounts or remove Meeting capabilities from the accounts that do not need them. 

[Sergio Quezada]

Take another look at you UID setting is correct.

Attribute	Required	Usage
uid	Yes	Webex username, usually set to corporate username
firstname	Yes
lastname	Yes
Displayname	No	Used to show the user’s name in the meeting participant list.
email	Yes
groupid	No	Supports only create, not update

https://help.webex.com/en-us/WBX67566/What-are-the-SAML-Assertion-Attributes-for-Webex-Meetings-and-Jabber