# IDP Factor enrollment

**URL:** <https://devforum.okta.com/t/idp-factor-enrollment/12317>\
**Category:** Questions\
**Created:** [January 1, 2021, 5:13pm UTC](https://devforum.okta.com/t/idp-factor-enrollment/12317 "2021-01-01T17:13:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![airwork](https://avatars.discourse-cdn.com/v4/letter/a/46a35a/32.png) [@airwork](https://devforum.okta.com/u/airwork)\
**Post date:** [January 1, 2021, 5:13pm UTC](https://devforum.okta.com/t/idp-factor-enrollment/12317/1 "2021-01-01T17:13:52Z")

</div>

Hi Team,

I have added 3rd party IDP to OKTA and added OKTA as SP to the 3rd party IDP and enabled IDP factor and created Factor Enrollment policy where I have set IDP factor is “Required”.

Once I try to access my application, it goes to OKTA for authentication and it completes successfully, later it goes to IDP gives me an option to configure factor and when I click on it, it goes to Enroll screen and the moment I click on Enroll it does the SAML to IDP and fails with an error “Unable to Enroll”

When I looked at the OKTA logs and found that “Unable to validate incoming SAML Assertion” Error.

Please help.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [January 26, 2024, 11:32pm UTC](https://devforum.okta.com/t/idp-factor-enrollment/12317/2 "2024-01-26T23:32:40Z")

</div>

Closed on January 26, 2024, 11:32pm UTC