Troubleshooting: SAML20IdPInit.PageLoad Error - Cannot Find the Original Signer

Version Affected: All
 
 

Overview

After updating the encryption certificate on a realm's Post Authentication tab, a Security Assertion Markup Language (SAML) trace shows that the SAML request is not being sent to the vendor via single sign-on (SSO). The error log shows:

Message="SAML20IdPInit.PageLoad: Error in SSO service, Cannot find the original signer.

Cause

The new certificate was not exported in the correct format.

Resolution

Make sure the certificate blob is exported in Base64 format.
 
 

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.