05-09-2019 07:44 AM - edited 02-21-2020 09:38 PM
Hi,
I have an issue with SAML authentication method.
If I tried to enter via VPN into my company I see this message:
May 09 15:51:53 [Lasso] func=xmlSecOpenSSLEvpSignatureVerify:file=/local/jenkins_engci_sjc/workspace/team_SSP/fxplatform/Builds/release__2.4.1_fcs_greenwich/build-smp-compile/fxos/linux/wrlinux/bitbake_build/tmp/work/corei7-64-wrs-linux/xmlsec1/1.2.20-r1/xmlsec1-1.2.20/src/openssl/signatures.c:line=493:obj=rsa-sha1:subj=EVP_VerifyFinal:error=18:data do not match:signature do not match
May 09 15:51:53 [SAML] consume_assertion: The profile cannot verify a signature on the message
[saml] webvpn_login_primary_username: SAML assertion validation failed.
Without SAML authentication the VPN goes up correctly.
#Confg
saml idp IDP_SSO_PRD
url sign-in https://xxx
base-url https://xxx
trustpoint idp saml-trust
trustpoint sp SAML-AUTH
signature rsa-sha256
force re-authentication
Thanks
Solved! Go to Solution.
05-25-2023 06:37 AM
Looks no one fixed this?!
09-08-2023 11:08 PM
Anybody got the solution.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide