25,130 questions
Certificate not matching in SAML response and federation metadata causing signature not valid
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 30%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Alagumuthu Melur dhandapani
6
Reputation points
Hi,
Certificate not matching what provided in SAML response and federation metadata causing SAML assertion signature not valid. We have validated the ID provided while request and in response and it matched.
Please help us how to address this issue.
Regards,
Alagumuthu
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
Alagumuthu Melur dhandapani 6 Reputation points
2022-03-18T06:12:06.397+00:00 What might be reason the signature is different ? Please help on this issue.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator2022-03-21T06:48:38.927+00:00 Apologies for the delay in reaching out to you. Are you still facing this issue ?
Have you used the right certificate ( format ) and uploaded the same ?
Can you share the screenshots of the issue ?
-
Alagumuthu Melur dhandapani 6 Reputation points
2022-03-21T07:46:33.697+00:00 Hi Girish,
yes, still issue persists. We are actually passing to value to the program for validation. One is the Federation Metadata XML(refer the below) and the Base64 encoded response. Our response is Assertion signed. X.509 certificate present in Federation metadata xml and in response which used for sign the asserstion should match, but is different. Hence we are getting error "signature not valid, signature cryptographic validation not successful".
Both the certificate should match in order to validate the source. Please help us in which scenario, Azure is sending the different certificate which is not in federation metadata.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2022-06-10T13:49:00.627+00:00 Hi guys
Any update?
-
Anonymous
2022-06-10T14:01:52.327+00:00 Hello guys
Anything else?
Sign in to comment
Sign in to answer