Troubleshooting

Invalid signature / digest mismatch

The content changed after signing, or a component reformatted the XML along the way (gateway, web antivirus, copy-paste).

“Invalid signature” / “digest mismatch”Signature

Probable cause. The content changed after signing, or a component reformatted the XML along the way (gateway, web antivirus, copy-paste).

What to do? Get the raw response (SAMLResponse field) without altering it. Check that the base64 encoding is not broken by line breaks or encoded twice.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my spaceDecode a SAML response