Forums, Documentation & Knowledge Base - ComponentSpace

The SAML response signature failed to verify.


https://componentspace.com/forums/Topic11411.aspx

By mayur4monto - 1/24/2021

I am getting this error randomly like every one / two days. if I change something in web.config file in service provider project/ then it will start working again but it again failed in next one or two days 

what can be the problem here ?

[1/25/2021 2:11:43 AM] INFO[ComponentSpace.SAML2.Exceptions.SAMLSignatureException: The SAML response signature failed to verify.
 at ComponentSpace.SAML2.InternalSAMLServiceProvider.VerifySAMLResponseSignature(XmlElement samlResponseElement)
 at ComponentSpace.SAML2.InternalSAMLServiceProvider.ProcessSAMLResponse(XmlElement samlResponseElement, Boolean& isInResponseTo, String& authnContext, String& userName, SAMLAttribute[]& attributes)
 at ComponentSpace.SAML2.InternalSAMLServiceProvider.ReceiveSSO(HttpRequest httpRequest, Boolean& isInResponseTo, String& partnerIdP, String& authnContext, String& userName, SAMLAttribute[]& attributes, String& relayState)
 at ComponentSpace.SAML2.SAMLServiceProvider.ReceiveSSO(HttpRequest httpRequest, Boolean& isInResponseTo, String& partnerIdP, String& authnContext, String& userName, IDictionary`2& attributes, String& relayState)
 at SAML_AssertionConsumerService.Page_Load(Object sender, EventArgs e) in c:\inetpub\vhosts\httpdocs\SAML\AssertionConsumerService.aspx.cs:line 35]
By ComponentSpace - 1/27/2021

Do you have the private key for the dexcom.hlxbureau.com certificate?

The identity provider would need this to sign the SAML response.

If you do, you have to update the idp.pfx which is the local certificate for the identity provider. It doesn't use the idp.cer file.

The identity provider signs with the private key (eg idp.pfx) and the service provider verifies with the corresponding public key (eg idp.cer).