SSO not working for SAML web application, Could not check the signature: The received certificate signature is not valid. (4282135)

Tchater maintenant avec le support

Retour

Commentaire envoyé

Cet article vous a-t-il à résoudre un problème ?

Sélectionner une évaluation

Titre

SSO not working for SAML web application, Could not check the signature: The received certificate signature is not valid.
Description

The application was configured for ADFS SSO using the documentation provided by the vendor, however whenever a user tries an SSO login they get an error saying they don't have permission to the application.
The service provider (SP) may also report that they are seeing the following or similar in their logs:
Could not check the signature: The received certificate signature is not valid
Cause

This application doesn't work with the default SAML token signature setting that CAM uses
Résolution
We have an option called samltoken.signature that has these three options:
- MessageOnly - Sign the outer message
- AssertionOnly - Sign the assertion element
- MessageAndAssertion - Sign both the outer message and the assertion element.
The default is MessageOnly.
Here is our documentation regarding this option:
https://support.oneidentity.com/technical-documents/cloud-access-manager/8.1.3/configuration-guide/6#TOPIC-853720

RESOLUTION 1:
1 - To fix the issue, in CAM go into the 'token settings' configuration for the application and change the value of samltoken.signature to 'MessageAndAssertion'.
Once that setting is changed the configuration recommended by the vendor should work.

Commentaire envoyé

Cet article vous a-t-il à résoudre un problème ?

Sélectionner une évaluation

Contenu recommandé

Historique de l’article :: Créé le : 3/29/2018
Dernière mise à jour le : 5/7/2023

Titre