Culture Amp SSO Login Not Working

How to fix it

Try these in order — the most common fix is first.

1. 1. Start from the Culture Amp login page

   Copy steps
   1. Go to https://<subdomain>.cultureamp.com/saml/<subdomain>
   2. In Okta, use a Bookmark App pointing to that URL
   Did this fix it? Yes No

2. 2. Verify region and Entity ID

   Copy steps
   1. Add .eu or .au after the subdomain if hosted there
   2. Compare Entity ID in IdP and Culture Amp
   Did this fix it? Yes No

3. 3. Renew certificates

   1. Update certificates at least two weeks before expiry
   Did this fix it? Yes No

4. 4. Assign users in the IdP

   1. Assign the app to the user or group, then retry
   Did this fix it? Yes No

5. 5. Use temporary password login

   1. SSO-only accounts get temporary password login as a lockout safeguard
   Did this fix it? Yes No

Symptoms

SSO redirect loops, 'invalid SAML response' or user not assigned errors.

Why it happens

• SP-initiated only: Okta dashboard tile fails
• Wrong region (.eu/.au) in the URL
• Entity ID mismatch or signature/certificate error
• User not assigned in the IdP (AADSTS50105)

This guide also covers

• culture amp sso not working
• culture amp saml error
• culture amp login

The same problem in other apps

All login, account & activation guides →

• Can't Log Into Lattice (SSO or Invalid Token) (Lattice)
• 15Five SSO Login Not Working (15Five)

Other Culture Amp errors

• Culture Amp Survey Link Not Working
• Is Culture Amp Survey Anonymous?
• Culture Amp HRIS Sync Missing Employees
• Culture Amp Performance Review Cycle Problems
• How to Cancel Culture Amp Subscription
• Culture Amp Renewal Price Increase
• Culture Amp Survey Invitation Emails Not Received