"SAML response signature is not valid. "

[Tom Poage]

Is your signing certificate expired? I've seen some vendors (erroneously) check the expiration date.

Tom.

> On Feb 28, 2017, at 4:24 PM, IAM David Bantz <dabantz at alaska.edu> wrote:
> 
> An SP we've had integrated and working for years (OrigamiRisk) is now rejecting assertions from my IdP with the message "SAML response signature is not valid."
> 
> Their error logs contain a seemingly complete copy of my IdP's signed response immediately after that message.
> 
> The logged outgoing SAML from my IdP asserts success and includes requested attributes. The outgoing assertion is not encrypted. None of my other SPs appear to be affected.
> 
> I want to say it must be the SP's problem, but if you can think of something further for me to look at in my IdP, I will appreciate it!
> 
> Thanks,
> 
> 
> David Bantz
> UA OIT IAM
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net