Signing both Message and Assertion throws Invalid Signature Error - Githubissues

onelogin / onelogin-java-sdk

5 stars 13 forks source link

Signing both Message and Assertion throws Invalid Signature Error #59

Closed Jess103 closed 1 year ago

Jess103 commented 1 year ago

Hi,

I have alreay posted the same question in stackoverflow but no luck that I'm submitting the issue here.

Java Version : 8
Validation Check Tool : https://samltool.io/
Signing Assertion Only : Valid
Signing Response Only : Valid
Signing Both : Response Signature Invalid

I tried

sign assertion > add assertion in response > sign response
pull out assertion from the response > sign assertion > add agdin in response > sign response but nothing worked; always getting the "Response Signature Invlid" when I sign both.

Is signing both using onelogin(java-saml.jar) not allowed? Onelogin Toolkit though spits valid "Sign Message and Assertion"...

Jess103 commented 1 year ago

Oh I mitook the repository; I re-opened this issue here Sorry for the mistake!