Version Affected: All
Overview
After updating the encryption certificate on a realm's Post Authentication tab, a Security Assertion Markup Language (SAML) trace shows that the SAML request is not being sent to the vendor via single sign-on (SSO). The error log shows:
Message="SAML20IdPInit.PageLoad: Error in SSO service, Cannot find the original signer.
Cause
The new certificate was not exported in the correct format.
Resolution
Make sure the certificate blob is exported in Base64 format.
SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.
Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.
Comments
Please sign in to leave a comment.