Help
Breadcrumbs

Troubleshooting SSO Primary Account Configuration Errors

This article explains common error messages you may encounter when configuring Single Sign-On (SSO) with your 101domain account.

Understanding these errors and their solutions will help you quickly resolve SSO configuration issues and ensure a smooth sign-in experience.

This article only applies to the Primary Account Owner of the 101domain account.

Error Message

Possible Error Reason(s)

Solution(s)

You cannot connect to this SSO provider because one or more existing users on your account are connected to a different provider. Choose a different provider or change your users' SSO configuration. Only one SSO provider is allowed per account.

Attempting to add a second Provider (e.g., adding Google when Okta is already active).

You must disable/remove the existing SSO provider before adding a new one.

Discovery URL request failed: <ERROR MSG>

Our system could not reach the IdP's configuration URL.

Check that your IdP Discovery URL is correct and accessible from the public internet.

Discovery response missing issuer.

The JSON returned by your IdP is malformed or missing the required issuer field.

Your Identity Provider is returning incomplete data. Please check your OIDC configuration settings with your Identity Provider.

Failed to connect to SSO provider. Please check your OIDC configuration and try again.

General handshake failure (Client ID/Secret mismatch, wrong scopes) at your Identity Provider.

Double-check your Client ID and Client Secret in your IdP and ensure they match what was entered.

Your SSO profile is already linked to another account. Please either choose a different SSO profile or disconnect this one from your other account.

The Primary Owner's IdP account is already claimed by another 101domain account.

You have likely used this SSO login on another 101domain account. You must disconnect it from the other account first.

The email address associated with your SSO profile <EMAIL> does not match the email address on file for your account <OTHER EMAIL>. Please use the matching SSO profile or change the email address on your account to match in order to continue.

Account Owner's SSO Profile email does not match the 101domain Primary Account email.

Change your 101domain account email to match your SSO email or vice versa, or use a different, matching SSO profile.

Update form submitted but no changes detected. Your SSO settings were not changed.

User clicked "Save" without modifying any fields.

No action needed. Make changes before clicking Save if updates are required.

Please wait before removing SSO again.

Rate limiting to prevent rapid toggling of SSO configuration.

Wait a few minutes before attempting to modify SSO settings again.

If you continue to experience difficulties with troubleshooting your login, please contact our friendly Support Team at 877.983.6624 (United States) or +1.760.444.8674 (International).