Access Management 9.5 - An error occurred message is displayed when login into the Content Manager Explorer (SAML Identity Provider)

Article Number:000019415 | Last Updated:9/2/2022 2:09 PM

Scope/Environment

Tridion Sites

Symptoms/Context

When login into the Content Manager Explorer through the Access Management (SAML Idp) prompt window, a message saying that "An error occurred." is displayed.

Error when specifying the login prompt appears

Error when specifying the login prompt appears

The AccessManagement.log file records the following:

Error|ComponentSpace.Saml2.SamlServiceProvider|Receiving an SSO response from a partner identity provider has failed. ComponentSpace.Saml2.Exceptions.SamlSignatureException:
The SAML response signature failed to verify.,sdl-web-xxxx/access-management-service/229b0adaxxxxb98a05a4e1b42e
1661149332814,   at ComponentSpace.Saml2.SamlServiceProvider.VerifySamlResponseSignatureAsync(XmlElement samlResponseElement),sdl-web-xxxx/access-management-service/229b0adaxxxxb98a05a4e1b42e
1661149332814,"   at ComponentSpace.Saml2.SamlServiceProvider.ProcessSamlResponseAsync(XmlElement samlResponseElement, String relayState)",sdl-web-xxxx/access-management-service/229b0adaxxxxb98a05a4e1b42e
1661149332814,   at ComponentSpace.Saml2.SamlServiceProvider.ReceiveSsoAsync(),sdl-web-xxxx/access-management-service/229b0adaxxxxb98a05a4e1b42e
1661149332815,   at ComponentSpace.Saml2.Authentication.SamlAuthenticationHandler.HandleSsoAsync(),sdl-web-xxxx/access-management-service/229b0adaxxxxb98a05a4e1b42e
1661149332815,   at ComponentSpace.Saml2.Authentication.SamlAuthenticationHandler.HandleRequestAsync(),sdl-web-xxxx/access-management-service/229b0adaxxxxb98a05a4e1b42e

Resolution

Solution: Verify that the certificate has not been updated/changed and if yes, update the Certificates section within the 'Identity providers' tab of Access Management.

Root Cause

Reference

SAML settings

Send Article Feedback