Error occured in RSA Federated Identity Manger (FIM) 4.1 'Unable to verify the signature value' error when processing assertion
Originally Published: 2013-07-04
Last Modified: 2023-10-06
Article Number
Applies To
RSA Product/Service Type: RSA Federated Identity Manger (FIM)
RSA Version/Condition: 4.1
ComponantSpace SAML v2.0 Single Sign-On (SSO) Component for .NET
Issue
Error message in system.out log
Unable to verify the signature value: SAMLSignedObject.verify() detected an invalid signature profile, com.rsa.fim.exception.CryptoUtilException: Unable to verify the signature value: SAMLSignedObject.verify() detected an invalid signature profile
Error message in debug.log
util.crypto.dsig.verify.error, com.rsa.fim.saml.InvalidCryptoException: SAMLSignedObject.verify() detected an invalid signature profile.
Cause
The SAML 2.x specification lists only three acceptable transforms. If a transform other than the listed ones is used this error is generated.
5.4.4 Transforms
Signatures in SAML messages SHOULD NOT contain transforms other than the enveloped signature transform (with the identifier http://www.w3.org/2000/09/xmldsig#enveloped-signature) or the exclusive canonicalization transforms (with the identifier http://www.w3.org/2001/10/xml-exc-c14n# or http://www.w3.org/2001/10/xml-exc-c14n#WithComments).
Verifiers of signatures MAY reject signatures that contain other transform algorithms as invalid.
Resolution
Related Articles
Error "Reason: Invalid credential" when attempting to configure RSA Via Access Identity Source Number of Views "Tokencode is incorrect" while attempting to resynchronize an RSA SecurID software token on RSA Authentication Manager 8.x Number of Views Users tab slow to load in SecurID Governance & Lifecycle Number of Views System.DllNotFoundException: Unable to load DLL 'km' Number of Views ORA-06550 error when attempting to run the Data_Retention_Pkg in RSA Identity Governance & Lifecycle Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
