"SAML response signature is not valid. "

[IAM David Bantz]

Currently used certs expire 2034.

I still have certs that expired in 2014 in the IdP metadata for SPs that
never consumed the new metadata with new certs in 2014.

But that hasn't changed since 2014.

David



On Tue, Feb 28, 2017 at 4:05 PM, Tom Poage <tfpoage at ucdavis.edu> wrote:

> Is your signing certificate expired? I've seen some vendors (erroneously)
> check the expiration date.
>
> Tom.
>
> > On Feb 28, 2017, at 4:24 PM, IAM David Bantz <dabantz at alaska.edu> wrote:
> >
> > An SP we've had integrated and working for years (OrigamiRisk) is now
> rejecting assertions from my IdP with the message "SAML response signature
> is not valid."
> >
> > Their error logs contain a seemingly complete copy of my IdP's signed
> response immediately after that message.
> >
> > The logged outgoing SAML from my IdP asserts success and includes
> requested attributes. The outgoing assertion is not encrypted. None of my
> other SPs appear to be affected.
> >
> > I want to say it must be the SP's problem, but if you can think of
> something further for me to look at in my IdP, I will appreciate it!
> >
> > Thanks,
> >
> >
> > David Bantz
> > UA OIT IAM
> > --
> > To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170228/cbf99eff/attachment-0001.html>