AADSTS76021: The request sent by client is not signed while the application requires signed requests

Question

The request is signed but still I get this issue

 <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
        <SignedInfo>
            <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
            <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
            <Reference URI="">
                <Transforms>
                    <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
                </Transforms>
                <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                <DigestValue>
            </Reference>
        </SignedInfo>

Request Id: 1b6fbc5e-39b5-4e8d-a3ff-7c8f43163500

Correlation Id: a96de4fe-1ef6-4378-b8e7-39a370791f48

Timestamp: 2023-02-13T09:53:15Z

Message: AADSTS76021: The request sent by client is not signed while the application requires signed requests

Answer 1

@Ran Shtivi

This error comes in when you have enabled one of the preview feature "SAML Request Signature Verification" and when either the application is not sending the signed SAML authentication request to AAD or in Azure AD you have not uploaded the correct certificate for it to validate the authentication request.

To fix this issue you can check and confirm if correct certificate is uploaded. To check this you can follow below steps,

• Login to Azure AD portal.
• Access Azure active directory blade.
• Click on Enterprise applications blade.
• Once you see list of all configured application you can click on the application for which you are getting an error.
• Click on Single sign-on blade and then look at "Verification certificates (optional) (Preview)" on the right pane.

• Confirm if the certificate uploaded is the correct one.

If Azure AD has the correct certificate then the issue might be from the application side. Application might not be sending the signed SAML authentication request to AAD.

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.