Security

SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert

arrangineni
Path Finder

Can anyone assist how to resolve this error, we are using self signed certs from idP and default certs in Splunk. Configurations on both end looks fine and no errors on idP end

splunkd errors:
-0400 ERROR UiSAML - Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert
-0400 ERROR Saml - Unable to verify Saml document
ERROR Saml - Error: Failed to verify signature with cert :/home/splunk/etc/auth/idpCerts/idpCert.pem;

Error on the UI: This after entering credentials in the Single Sign on URL
Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert

Labels (1)
0 Karma

JGL
New Member

Sometimes this error is shown because the order of the certificate in the chain is not how Splunk needs it. Ensure you have the root, any intermediaries and then the leaf certificate configured (pasted in to the config) in that order.

0 Karma

PavelP
Motivator

Hello @arrangineni,

you need configure splunk to trust the self signed certificate, follow the second part of this troubleshooting manual: https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/TroubleshootSAMLSSO

Additionally check this answer: https://answers.splunk.com/answers/543221/problem-with-saml-cert-error-uisaml-verification-o.html

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...