Azure AD SAML not working : Why is verification of SAML assertion using the IDP's certificate provided failing?

[ayush1906]

Hi All,

have generated Azure AD SAML XML and certificate using Splunk Blog:

 https://www.splunk.com/en_us/blog/tips-and-tricks/configuring-microsoft-s-azure-security-assertion-m... 

After loading up XML in a totally new instance, it gives the below error:

 Verification of SAML assertion using the IDP's certificate provided failed. Error: failed to verify signature with cert

 In Azure portal can see the certificate is active:

not sure where to look further..... any leads here......


@tkomatsubara_sp @richgalloway @tshah-splunk 

[pravinpawar]

Hi All,

I'm currently facing the same issue. Any idea what was wrong with payload?

When I upload DEV Azure AD tenant metadata SSO is working as expected.

But it's not working for STAGE and PROD tenant and showing below error:

Verification of SAML assertion using the IDP's certificate provided failed. Error: failed to verify signature with cert

[ayush1906 · Accepted solution]

our team had created a portal, which interacted with Azure Portal, looks like some payload mismatch was causing certificate issue.

On configuring directly in Azure Portal, it worked as expected. 🙂