SAML signature validation issue in SAS Viya 4

ravikumar901 — Tue, 27 Aug 2024 12:28:55 GMT

Hi,

Im configuring SAML in SAS Viya 4 ,i have followed
https://documentation.sas.com/doc/en/sasadmincdc/v_055/calauthmdl/n1iyx40th7exrqn1ej8t12gfhm88.htm#n17fub6pu6ue9cn1ada0mg418bab
and communities link
https://communities.sas.com/t5/SAS-Communities-Library/SAS-Viya-2021-2-SAML-with-Multi-Tenancy/ta-p/793267
generated certificates using following commands

mkdir -p ~/SAML_Certs
openssl req -new -newkey rsa:4096 -days 3650 -nodes -x509 \
 -subj "/ST=SelfSigned/CN=SASLogonSigningKey" \
 -keyout ~/SAML_Certs/SASLogonSigning.key \
 -out ~/SAML_Certs/SASLogonSigning.cert
openssl rsa -in ~/SAML_Certs/SASLogonSigning.key -out ~/SAML_Certs/SASLogonSigningRSA.ke

but getting validation protocol message signature failed error while logging with user .

Please help me out to resolve this.

Re: SAML signature validation issue in SAS Viya 4

gwootton — Wed, 28 Aug 2024 18:33:18 GMT

This typically indicates an issue in your idpMetadata field in sas.logon.saml.providers. The SAML assertion being sent to authenticate the user is being signed by a different certificate/key than what is in the idpMetadata, so SAS Logon Manager cannot validate the signature.

topic Re: SAML signature validation issue in SAS Viya 4 in Administration and Deployment

SAML signature validation issue in SAS Viya 4

Re: SAML signature validation issue in SAS Viya 4