SAM 2.0 Assertion fail with Certificate in assertion's keyinfo doesn't match configured signing certificate

(Doc ID 1916683.1)

Last updated on DECEMBER 11, 2017

Applies to:

Oracle WebLogic Server - Version 10.3.5 and later
Information in this document applies to any platform.

Symptoms

After configuring SAML 2.0 on Weblogic Server as Identity Provider (IdP), the assertion is not working correctly and we can see the following stuck in the server log files after enabling the SecuritySAML2Service debugging:


As we can see, the signature started to be verified for this assertion, then we get this exception if something is wrong with the signature.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms