{"record":{"id":"143bf1ee03719578","repo":"RocketChat/Rocket.Chat","slug":"missing-saml-action","errorCode":null,"errorMessage":"Missing SAML action","messagePattern":"Missing SAML action","errorType":"exception","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"apps/meteor/server/lib/saml/listener.ts","lineNumber":52,"sourceCode":"\t\tcredentialToken: splitPath[4],\n\t};\n\n\tSAMLUtils.log(result);\n\treturn result;\n};\n\nconst middleware = async function (req: express.Request, res: ServerResponse, next: (err?: any) => void): Promise<void> {\n\t// Make sure to catch any exceptions because otherwise we'd crash\n\t// the runner\n\ttry {\n\t\tconst samlObject = samlUrlToObject(req.originalUrl);\n\t\tif (!samlObject?.serviceName) {\n\t\t\tnext();\n\t\t\treturn;\n\t\t}\n\n\t\tif (!samlObject.actionName) {\n\t\t\tthrow new Error('Missing SAML action');\n\t\t}\n\n\t\tconst service = SAMLUtils.getServiceProviderOptions(samlObject.serviceName);\n\t\tif (!service) {\n\t\t\tSystemLogger.error({\n\t\t\t\tmsg: 'SAML service provider not found',\n\t\t\t\tserviceName: samlObject.serviceName,\n\t\t\t});\n\t\t\tthrow new Error('SAML Service Provider not found.');\n\t\t}\n\n\t\tawait SAML.processRequest(req, res, service, samlObject);\n\t} catch (err) {\n\t\t// @ToDo: Ideally we should send some error message to the client, but there's no way to do it on a redirect right now.\n\t\tSystemLogger.error({ err });\n\n\t\tif (!res.headersSent) {\n\t\t\tconst url = Meteor.absoluteUrl('home');","sourceCodeStart":34,"sourceCodeEnd":70,"githubUrl":"https://github.com/RocketChat/Rocket.Chat/blob/b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0/apps/meteor/server/lib/saml/listener.ts#L34-L70","documentation":"Error \"Missing SAML action\" thrown in RocketChat/Rocket.Chat.","triggerScenarios":"Thrown in the SAML listener when the incoming request has no SAML action (login/logout/metadata).","commonSituations":"See trigger scenarios.","solutions":["Call the SAML endpoint with a supported action parameter (e.g. authorize or metadata)."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0","analyzedAt":"2026-08-18T15:26:39.429Z","contentChangedAt":"2026-08-18T15:26:39.429Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}