4 ms·

Thanks for this feedback.

• cratermoon 3y ago
  I ran across and had to fix something similar in a previous job. The organization's SAML assertions were being rejected for invalid signatures. What I found in the code that created the XML and signed it, someone had changed or removed a tag after the signature was created but before the XML was written, thus the signature didn't match what was in the actual assertion. Reverting that change fixed the immediate problem, and made login work again for most cases. It took a bit longer to address the underlying issue. On the whole were trying to support SAML using a library written at a fairly low level, one intended for people trying to implement the SAML protocol itself, not use SAML for authentication. This lead to ongoing issues that they never really solved.