SSO login causes "warn Response wasnt properly signed ... " or HTTP400

Attempts to login on Chrome through single sign-on (SSO) result in this error.

Error: {“warn”: “Response wasn’t properly signed (resp:false, unenc:true, end:false) for …“}

On Internet Explorer 11, you see an HTTP400 error.

Cause

There are discrepancies between the certificates used by the Identity Provider (IdP) and the Service Provider (SP) in the SAML response.

Solution

  1. Retrieve the new Federation Metadata from the ADFS server
  2. Enter this data in the Zivver SSO settings.
    Overwrite the existing metadata.

Refer to these steps in the AFDS manual for further instructions.