Search code examples
onelogin

Signature validation failed. Reference validation failed

I am using onelogin for SAML as SP. I was able to get the response XML. But the validation of the SAML response is failing due to 

Signature validation failed. Reference validation failed

I tried to check the XML via the online tool but got the same error.

Could you please let me know how to fix this.

Solution

  • That happens when the SP is not able to validate the Signature included in the SAMLResponse.

    In order to fix it, verify that the public certificate of the settings that you have register for the IdP is the right value.

    One easy way to verify it is to record the SAML flow with the SAMLTracer Firefox plugin, and then review the value of the x509Certificate value element of the Signature matches the value you have in your SAML toolkit setting.