# An internal error has occurred - "Could not process response from SAML identity provider"

**URL:** <https://forum.keycloak.org/t/an-internal-error-has-occurred-could-not-process-response-from-saml-identity-provider/7658>\
**Category:** Getting advice\
**Tags:** saml\
**Created:** [March 1, 2021, 12:40pm UTC](https://forum.keycloak.org/t/an-internal-error-has-occurred-could-not-process-response-from-saml-identity-provider/7658 "2021-03-01T12:40:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![stayen](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/stayen/32/2497_2.png) [@stayen](https://forum.keycloak.org/u/stayen)\
**Post date:** [March 1, 2021, 12:40pm UTC](https://forum.keycloak.org/t/an-internal-error-has-occurred-could-not-process-response-from-saml-identity-provider/7658/1 "2021-03-01T12:40:57Z")

</div>

I am trying to set up an ADFS identity provider based upon [this blog post](https://www.keycloak.org/2017/03/how-to-setup-ms-ad-fs-30-as-brokered.html).

Finally, I manage to log on at ADFS, but after redirecting to Keycloak, I see a page with

“An internal error has occurred”

message. In the server logs I see:

```
ERROR [org.keycloak.services.error.KeycloakErrorHandler] (default task-1) Uncaught server error: org.keycloak.broker.provider.IdentityBrokerException: Could not process response from SAML identity provider.

```

The [SAML response](https://pastebin.com/CZ6G4zt3) itself doesn’t look too broken. How can I debug this problem?

---

<div class="post-metadata">

**Author:** ![sleivo](https://avatars.discourse-cdn.com/v4/letter/s/a587f6/32.png) [@sleivo](https://forum.keycloak.org/u/sleivo)\
**Post date:** [April 12, 2021, 3:19pm UTC](https://forum.keycloak.org/t/an-internal-error-has-occurred-could-not-process-response-from-saml-identity-provider/7658/2 "2021-04-12T15:19:01Z")

</div>

Did you get this resolved? I´m facing the same issue.

---

<div class="post-metadata">

**Author:** ![stayen](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/stayen/32/2497_2.png) [@stayen](https://forum.keycloak.org/u/stayen)\
**Post date:** [April 13, 2021, 10:52am UTC](https://forum.keycloak.org/t/an-internal-error-has-occurred-could-not-process-response-from-saml-identity-provider/7658/3 "2021-04-13T10:52:58Z")

</div>

The problem was that attempts to log on at ADFM portal not initiated by service provider, resulted in Keycloak not being able to decide what to do (thus the reported error).

Finally, I managed to set up ADFS identity provider at Keycloak and managed to make SSO work on Drupal.