Article - CS421479

Some users not able to login Windchill using SSO account with error message "opensaml::FatalProfileException" in Windchill PDMLink

Modified: 12-Nov-2025   


Applies To

  • Windchill PDMLink 12.0 to 12.1
  • PingFederate

Description

  • Users are intermittently getting the below error post successfully logging in to the server; incognito works fine:
opensaml::FatalProfileException
  • User are unable to login into the SSO enabled server with "opensaml::FatalProfileException" error in WindchillPDMLink
  • Some users not able to login Windchill using SSO account with error message:
opensaml::FatalProfileException

The system encountered an error at xxx

To report this problem, please contact the site administrator at ptc.com/support.

Please include the following message in any email:

opensaml::FatalProfileException at (https://xxx.com/Shibboleth.sso/SAML2/POST)

SAML response reported an IdP error.

Error from identity provider:

    Status: urn:oasis:names:tc:SAML:2.0:status:Responder
    Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed
    Message: Authentication Failed


 

This is a printer-friendly version of Article 421479 and may be out of date. For the latest version click CS421479