I was trying to setup a local IDP on my Eclipse and connect to HANA Cloud Platform.
All configuration steps were done successfully.
Local testing with IDP works, but not from HANA Cloud Platform.
After calling the application the redirect to the local IDP works,
the credentials are provided and Login-Button was pressed.
These steps are OK, but after that, the problem occurred.
A new pop-up window is shown asking for user name and password.
(The server reports that it is from SAP HANA Cloud Platform).
I checked the configuration steps several times, deleted and created
the servers new, but I did not found the error.
After looking in detail, I found some errors at the log-files.
The messages from method com.sap.security.saml2.sp.sso.AssertionValidationService:
- Signature validation of SAML2Assertion failed.
- com.sap.security.saml2.lib.common.SAML2Exception: Signature not valid
- com.sap.security.saml2.lib.assertions.SAML2AssertionJxbImpl.validateSignature(SAML2AssertionJxbImpl.java
- Service Provider has received SAML2Assertion from Identity Provider [localidp] that has invalid signature.
I deleted the localidp files from my eclipse, generated a self sign key pair and certificate (localidp.jks) for the local test IdP.
I am working on a 64-Bit Windows 7 machine without any proxy and checked the firewall-settings.
But I had the same issue!! What can I do to get this working ?
Thanks for help
Regards
J. Berndt