We have an on-prem Splunk-Enterprise Version: 9.0.4.1 We updated IDP url in the SAML configuration and after uploading new IDP certificate to all search heads under .../auth/idpCerts, it was working for about an hour and then it stopped working getting an error: "Verification of SAML assertion using IDP's cert failed. Unknown signer of SAML response". We logged in to the search heads It was noticed that the idpCert.pem is breaking authentication because the file idpCert.pem updated and we are currently investigating if this is a system related issue. Is this a known issue?
