error processing incoming assertion: Message was signed, but signature could not be verified.

[Christopher Bongaarts]

On 7/2/2020 6:10 AM, Pavan Kishore Vuppada wrote:
>
> I have configured Siteminder as IDP & Shibboleth as SP.
>
> I am trying to sign and encrypt the assertion. On the shibboleth side, 
> it is not able to verify the signature. But if we individually either 
> sign or encrypt assertion, it is working fine without any problems.
>
> The error in the logs are very generic (Error - error processing 
> incoming assertion: Message was signed, but signature could not be 
> verified).
>
> Is there a way to know what exactly has caused the failure? I have 
> enabled DEBUG logging, but there is not much info. there. Can we check 
> the part of XML / signature which is causing the problem ?
>
Based on the log messages, it looks like it is successfully validating 
the SAML Response, successfully extracting and decrypting the 
Authentication Assertion, but failing to validate the Authentication 
Assertion.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200702/b858e3b4/attachment.htm>