SSO Troubleshooting: The Assertion of the Response is not signed and the SP requires it
Learn how to troubleshoot this error.
Error Message
When attempting SSO, you get an error:
[su_quote]The Assertion of the Response is not signed and the SP requires it[/su_quote]
Explanation
Foundry (which is the service provider or SP) requires the identity provider's SAML Response's Assertion to be signed by the identity provider using the identity provider's signing certificate. While signing the Response is optional, signing the Assertion is required.
Resolution
In your identity provider, in the EVERFI service provider configuration, ensure that the identity provider signs the SAML Assertion using the same signing certificate that is configured in the identity provider in Foundry.