SAML: Logout failure
SummaryLogout from SAML is failing
after a change at IDP side. Developer started using SHA256 instead of SHA1 for signature method. The login is working fine.
Error Messagesjava.security.SignatureException: Signature encoding error
followed with:java.io.IOException: ObjectIdentifier mismatch: <188.8.131.52>
Steps to Reproduce
- Login using sso url.
- Click Logout.
The "Logout (SLO) protocol binding" for IDP auth was using "HTTP Redirect" after moving to SHA256 at IDP.
In case of SHA-256 signature encoding at IDP, for SLO it is mandatory to use only SOAP binding for "Logout (SLO) protocol binding" in the IDP auth of the SAML configuration.
Published May 24, 2017 - Updated June 9, 2017