Article - CS421479
Some users not able to login Windchill using SSO account with error message "opensaml::FatalProfileException" in Windchill PDMLink
Modified: 12-Nov-2025
Applies To
- Windchill PDMLink 12.0 to 12.1
- PingFederate
Description
- Users are intermittently getting the below error post successfully logging in to the server; incognito works fine:
opensaml::FatalProfileException
- User are unable to login into the SSO enabled server with "opensaml::FatalProfileException" error in WindchillPDMLink
- Some users not able to login Windchill using SSO account with error message:
opensaml::FatalProfileException
The system encountered an error at xxx
To report this problem, please contact the site administrator at ptc.com/support.
Please include the following message in any email:
opensaml::FatalProfileException at (https://xxx.com/Shibboleth.sso/SAML2/POST)
SAML response reported an IdP error.
Error from identity provider:
Status: urn:oasis:names:tc:SAML:2.0:status:Responder
Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed
Message: Authentication Failed
This is a printer-friendly version of Article 421479 and may be out of date. For the latest version click CS421479