Signature cryptographic validation not successful error for all RSA SecurID Access integrated Windows Authentication (IWA) attempts
Originally Published: 2020-04-27
Last Modified: 2022-06-20
Article Number
Applies To
RSA Product/Service Type: Identity Router
Issue
The User Event Monitor shows the following messages:
User ID: unknown
Description: Portal logon failed - Authentication failed.
Authentication Details: {"additionalText":"{MESSAGE=Idp login failed. There was trouble processing the idp request., USERID=unknown, USERNAME=unknown, NOT_AUTHNED_REASON=Unable to authenticate with the credentials you provided. Please try again., RESULT=NOT_AUTHENTICATED}"}
Description: Portal logon failed - Authentication failed.
Authentication Details: {"additionalText":"{MESSAGE=Idp login failed. There was trouble processing the idp request., USERID=unknown, USERNAME=unknown, NOT_AUTHNED_REASON=Unable to authenticate with the credentials you provided. Please try again., RESULT=NOT_AUTHENTICATED}"}
The following error is seen in the IDR logs:
ERROR com.symplified.platform.webservice.WebServiceApiSecurityUtils[268] - No Authorization header Present
.
.
.
Caused by: org.opensaml.xmlsec.signature.support.SignatureException: Signature cryptographic validation not successful
.
.
.
Caused by: org.opensaml.xmlsec.signature.support.SignatureException: Signature cryptographic validation not successful
Cause
Resolution
Related Articles
Cryptographic policies in other countries Number of Views Update an existing RSA Cloud Authentication Service Integrated Windows Authentication (IWA) Connector Identity Provider SA… Number of Views RSA SecurID Access Automatic Integrated Windows Authentication (IWA) not working Number of Views Users cannot authenticiate to the RSA SecurID Access Portal or protected applications using Microsoft Integrated Windows A… Number of Views Accessing the Portal via IWA always prompt for sign in access authorization over the IWA server URL. Number of Views
Trending Articles
Deploy an Identity Router Virtual Machine in Microsoft Azure How to Replace the Web Server Certificate for the RSA Identity Governance & Lifecycle Web Console How to download the RSA Authentication Manager Console Root Certificate in DER format How to Change the Token Lifetime Extension Window in Authentication Manager Using rsautil AFX Server and Remote Collection Agents fail to start after updating Java to version 1.8u241 (1.8.0_241) / 1.7u251 (1.7.0_…
Don't see what you're looking for?
