I am configuring Splunk access control with SAML onelogin and I have uploaded the onelogin IdP meta data file to splunk. After configuration splunk app is redirecting to onelogin login page, but I am getting error message below :
Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert :/dnbusr1/raomu/splunk/etc/auth/idpCerts/idpCert.pem;
Please suggest .
Did you ever get this working? We are having the same issue.
have a look at this answer:
I have followed that link before I posted my question.
I have uploaded the SAML file provided by Onelogin team, and its taking all the information automatically. From where I can get root, intermediate and leaf certificate ? Another thing I am testing this configuration In Test environemnt where I have installed only SH 7.0 ver hope that should not be an issue ?
You can ask Onelogin team to provide root, intermediate and leaf certificate, I think leaf certificate and idpCert.pem are same but I might be wrong.