# Hulp bij SAML-integratie - Nieuwe gebruikers worden niet aangemaakt

**URL:** <https://meta.discourse.org/t/help-with-saml-integration-new-users-are-not-created/176217>\
**Category:** Support\
**Created:** [15 januari 2021 om 16:38 UTC](https://meta.discourse.org/t/help-with-saml-integration-new-users-are-not-created/176217 "2021-01-15T16:38:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nicolás\_Mella](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nicol%C3%A1s_mella/32/206233_2.png) [@Nicolás\_Mella](https://meta.discourse.org/u/Nicol%C3%A1s_Mella)\
**Post date:** [15 januari 2021 om 16:38 UTC](https://meta.discourse.org/t/help-with-saml-integration-new-users-are-not-created/176217/1 "2021-01-15T16:38:32Z")

</div>

Hi there !

I am trying to integrate Keycloak Single Sign On with Discourse. I am using SAML client. Sequence is this:

1. User goes to discourse [webpage](https://comunidad.mercadoempresas.cl/). (Discourse version: 2.7.0)
2. User click on LogIn button
3. User selects with SAML
4. User is forwarded to the Keycloak instance for authentication.
5. Keycloak redirect User back to discourse webpage.
6. User is not created. Error shows: “_Sorry, there was an error authorizing your account. Please try again_.”

Discourse Logs shows error:

“**(saml) Authentication failure! invalid\_ticket: OneLogin::RubySaml::ValidationError, Fingerprint mismatch**”

(

 ![user](https://global.discourse-cdn.com/meta/original/3X/8/4/845ee10fbd50b0fca2c3fa78cfc54e6e60be2f71.jpeg)

Any hint or advise ? Thanks for your time.

---

<div class="post-metadata">

**Author:** ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)\
**Post date:** [15 januari 2021 om 21:01 UTC](https://meta.discourse.org/t/help-with-saml-integration-new-users-are-not-created/176217/3 "2021-01-15T21:01:20Z")

</div>

You can search the saml plugin for “Fingerprint mismatch.” My guess is that you don’t have the right credentials/kays to talk to SAML. Next is something about the scope.
