Mattermost SAML - Failed to verify signature - Encryption | authentik | Page 1

glad pilot Sep 3, 2023, 11:59 AM

#

Hello, I'm trying to add Authnetik SAML to Mattermost with encryption enabled but I'm getting a "Failed to verify signature" error from Authnetik.
I have generated a set of keys and certificates.
MM - SAML - key and cert added to Mattermost as Service Provider Private Key and Service Provider Public Certificate
Auth - MM - SAML - certificate added to MM as Identity Provider Public Certificate
I have set the Signing Certificate on the provider to Auth - MM - SAML and the Verification Certificate to MM - SAML.
On MM is Signature Algorithm RSAwithSHA256, Authentik Digest algorithm SHA256 and Signature algorithm RSA-SHA256
Without encryption and signing, logging works. I tried Identity Provider Metadata URL in MM, but it doesn't work with url from Authentik

Snimek_obrazovky_2023-09-03_v_13.54.37.jpg

Snimek_obrazovky_2023-09-03_v_13.54.46.jpg

Snimek_obrazovky_2023-09-03_v_13.55.28.jpg

Snimek_obrazovky_2023-09-03_v_13.55.42.jpg

glad pilot Sep 4, 2023, 9:56 AM

#

Would anyone have an idea what to do or how to debug the "Failed to verify signature" message in more detail?

glad pilot Sep 5, 2023, 2:00 PM

#

I have tried many different options, but none of them work.
Is there any good way to debug the "Failed to verify signature"?

#Mattermost SAML - Failed to verify signature - Encryption