SAML signature validation issue in SAS Viya 4

[ravikumar901]

Hi,

Im configuring SAML in SAS Viya 4 ,i have followed 
https://documentation.sas.com/doc/en/sasadmincdc/v_055/calauthmdl/n1iyx40th7exrqn1ej8t12gfhm88.htm#n...
and communities link 
https://communities.sas.com/t5/SAS-Communities-Library/SAS-Viya-2021-2-SAML-with-Multi-Tenancy/ta-p/...
generated certificates using  following commands

mkdir -p ~/SAML_Certs
openssl req -new -newkey rsa:4096 -days 3650 -nodes -x509 \
 -subj "/ST=SelfSigned/CN=SASLogonSigningKey" \
 -keyout ~/SAML_Certs/SASLogonSigning.key \
 -out ~/SAML_Certs/SASLogonSigning.cert
openssl rsa -in ~/SAML_Certs/SASLogonSigning.key -out ~/SAML_Certs/SASLogonSigningRSA.ke

but getting validation protocol message signature failed error while logging with user .

Please help me out to resolve this.

[gwootton · Accepted solution]

This typically indicates an issue in your idpMetadata field in sas.logon.saml.providers. The SAML assertion being sent to authenticate the user is being signed by a different certificate/key than what is in the idpMetadata, so SAS Logon Manager cannot validate the signature.