Security

SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert

arrangineni
Path Finder

Can anyone assist how to resolve this error, we are using self signed certs from idP and default certs in Splunk. Configurations on both end looks fine and no errors on idP end

splunkd errors:
-0400 ERROR UiSAML - Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert
-0400 ERROR Saml - Unable to verify Saml document
ERROR Saml - Error: Failed to verify signature with cert :/home/splunk/etc/auth/idpCerts/idpCert.pem;

Error on the UI: This after entering credentials in the Single Sign on URL
Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert

Labels (1)
0 Karma

JGL
New Member

Sometimes this error is shown because the order of the certificate in the chain is not how Splunk needs it. Ensure you have the root, any intermediaries and then the leaf certificate configured (pasted in to the config) in that order.

0 Karma

PavelP
Motivator

Hello @arrangineni,

you need configure splunk to trust the self signed certificate, follow the second part of this troubleshooting manual: https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/TroubleshootSAMLSSO

Additionally check this answer: https://answers.splunk.com/answers/543221/problem-with-saml-cert-error-uisaml-verification-o.html

0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...