Difference between revisions of "Troubleshooting Single Sign On"
Line 33: | Line 33: | ||
For instructions on uploading your IdP meta data into the Hornbill SSO Profile (which includes signing certificates) click the following link: [[Single Sign On Profiles#Uploading Your IdP Meta Data into the Hornbill SSO Profile|'''Single Sign on Profiles''']] | For instructions on uploading your IdP meta data into the Hornbill SSO Profile (which includes signing certificates) click the following link: [[Single Sign On Profiles#Uploading Your IdP Meta Data into the Hornbill SSO Profile|'''Single Sign on Profiles''']] | ||
+ | |||
+ | Also | ||
| align="left" | | | align="left" | |
Revision as of 16:45, 11 October 2019
Home > Integration > Essential Integrations > Single Sign On with SAML 2.0 > Trouble Shooting Single Sign On
IntroductionHornbill's Single Sign On implementation is designed to present you with helpful error messages in situations where something may not be quite right. This page outlines the common scenarios and what to do to overcome them.
|
Related Articles |
Common Issues
"The public certificate used for signing the assertion is not known to the service provider...."A common cause of this error message is that the signing certificate stored in your Identity provider has been renewed and therefore no longer matches the SSO certificate you have stored in Hornbill. Some Identity Providers (such as ADFS) automatically renew signing certificates periodically. By default, the ADFS AutoCertificateRollover property is set to true so the certificates will change automatically without any direct action. Simply put, this error message indicates that the signing certificate given to Hornbill by your identity provider does not match any of the certificates currently stored in the Hornbill SSO Profile. Corrective ActionThis can be rectified by uploading a new certificate key to the Hornbill SSO Profile. Please contact the security or administration team within your company to request for a refreshed ADFS Server certificate key.
For instructions on uploading your IdP meta data into the Hornbill SSO Profile (which includes signing certificates) click the following link: Single Sign on Profiles Also |