"The SAML message signature could not be validated" error when activating IDP configuration for AuthHub

Products

• Support Portal & Access Issues
• Symantec
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Package
• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS
• Email Security.cloud
• Cloud Secure Web Gateway - Cloud SWG
• Cloud Secure Web Gateway

Issue/Introduction

When activating new IDP configuration for AuthHub per instruction Updating Your IdP Settings for the Broadcom Transition to AuthHub you run into "The SAML message signature could not be validated" error:

 

Cause

IdP SAML requests are not signed in AuthHub by default as it was in Okta. 

Resolution

Open a support case with to enable this option in Broadcom AuthHub configuration for particular domain.