DLP SSO SAML request is not signed with expected signature algorithm error

Products

• Data Loss Prevention Enforce

Issue/Introduction

You configured SAML authentication on the Enforce with 3rd party tool, e.g. AD FS and you get the below error:

SAML request is not signed with expected signature algorithm. SAML request is signed with signature algorithm ### . Expected signature algorithm is ###

Environment

DLP 16.X

DLP 25.1

Resolution

The currently supported DLP builds do not support SHA-256 as your hash algorithm. Many IdP's provide a SHA-256 by default. In your IdP, change the hash algorithm to SHA-1