Security

SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert

arrangineni
Path Finder

Can anyone assist how to resolve this error, we are using self signed certs from idP and default certs in Splunk. Configurations on both end looks fine and no errors on idP end

splunkd errors:
-0400 ERROR UiSAML - Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert
-0400 ERROR Saml - Unable to verify Saml document
ERROR Saml - Error: Failed to verify signature with cert :/home/splunk/etc/auth/idpCerts/idpCert.pem;

Error on the UI: This after entering credentials in the Single Sign on URL
Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert

Labels (1)
0 Karma

JGL
New Member

Sometimes this error is shown because the order of the certificate in the chain is not how Splunk needs it. Ensure you have the root, any intermediaries and then the leaf certificate configured (pasted in to the config) in that order.

0 Karma

PavelP
Motivator

Hello @arrangineni,

you need configure splunk to trust the self signed certificate, follow the second part of this troubleshooting manual: https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/TroubleshootSAMLSSO

Additionally check this answer: https://answers.splunk.com/answers/543221/problem-with-saml-cert-error-uisaml-verification-o.html

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...