---
title: Overriding error handling in an IdP connection
description: You can override how incoming errors are handled before they're relayed to the requesting application or partner.
component: pingfederate
version: 13.0
page_id: pingfederate:administrators_reference_guide:pf_overriding_error_handling_idp_connection
canonical_url: https://docs.pingidentity.com/pingfederate/13.0/administrators_reference_guide/pf_overriding_error_handling_idp_connection.html
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Overriding error handling in an IdP connection

You can override how incoming errors are handled before they're relayed to the requesting application or partner.

## About this task

You can optionally enable **Passthrough Errors**, and PingFederate will include the error message from the identity provider (IdP) *(tooltip: \<div class="paragraph">
\<p>A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\</p>
\</div>)* in three main places:

* User-Facing Errors: Rendered in PingFederate's error templates.

* Error Redirects: Sent as the `errorDetail` query parameter when redirecting to `InErrorResource`.

* Protocol Responses: Used in downstream protocol responses, specifically:

  * Security Assertion Markup Language (SAML) *(tooltip: \<div class="paragraph">
    \<p>A standard, XML-based, message-exchange framework enabling the secure transmittal of authentication tokens and other user attributes across domains.\</p>
    \</div>)*: The `<StatusMessage>` element.

  * OpenID Connect (OIDC) *(tooltip: \<div class="paragraph">
    \<p>An authentication protocol built on top of OAuth that authenticates users and enables clients (relying parties) of all types to request and receive information about authenticated sessions and users. OIDC is extensible, allowing clients to use optional features such as encryption of identity data, discovery of OpenID Providers (OAuth authorization servers), and session management.\</p>
    \</div>)*: The `error_description` parameter.

  * WS-Federation *(tooltip: \<div class="paragraph">
    \<p>Part of the WS-Security framework and an extension of WS-Trust, it defines mechanisms allowing different security realms to broker information on identities, identity attributes, and authentication.\</p>
    \</div>)*: The `<Fault>` element.

## Steps

1. In the PingFederate administrative console, go to **Authentication > Integration > IdP Connections**.

2. Click the name of the connection to open it in the **IdP Connection** window.

3. On the **Activation & Summary** tab, scroll down to the **Protocol Settings** section, then click **Overrides**.

4. On the **Overrides** tab, in the **Error Handling** section, select the **Passthrough Errors** checkbox.

5. Click **Save** to complete the configuration.

   Alternatively, click **Next** to carry on with the rest of the connection settings.