Skip to main content
flashmap
Participant
Oct 15, 2024 3:33 PM UTC
Answered

SAML Signature (change SHA1 to SHA256)

I'm trying to setup SAML with ColdFusion 2021 by doing the SP and IDP configurations inside the ColdFusion Administrator. All settings appear to be complete and correct but when an InitSAMLAuthRequest gets itiniated I receive the following error.

 

Error details: MSIS7093:
The message is not signed with expected signature algorithm.
Message is signed with signature algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1.
Expected signature algorithm http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

 

Is the signature algorithm (in this case SHA1) defined by CF? If so, how do I switch from SHA1 to SHA256?

    This topic is closed to new replies. Start a new post to keep the conversation going.
    Vikram_Kumar_M
    Vikram_Kumar_MCorrect answer
    Adobe Employee
    Oct 15, 2024 5:47 PM UTC

    @flashmap, please get in touch with the support team at cf.install@adobe.com.

     

    Thanks,

    Vikram

    View reply

    4 replies

    flashmapAuthor
    Participant
    Oct 22, 2024 4:55 PM UTC

    Status Update:  Vikram provided an update.  SHA-256 was available as an option after the update was installed.

    Thank you, Vikram.  Great support!

    Translate
    flashmapAuthor
    Participant
    Oct 15, 2024 3:37 PM UTC

    The above post contains the following text, which I did not intend to include.  Can't figure out how to edit it out.  Sorry for any confusion.


    http://www.w3.org/2000/09/xmldsig#rsa-sha1.
    w3.org/2000/09/xmldsig#rsa-sha1.
    xmldsig-more namespace
    w3.org/2001/04/xmldsig-more#rsa-sha256.

    Translate
    Vikram_Kumar_M
    Adobe Employee
    Vikram_Kumar_MCorrect answer
    Adobe Employee
    Oct 15, 2024 5:47 PM UTC

    @flashmap, please get in touch with the support team at cf.install@adobe.com.

     

    Thanks,

    Vikram

    Translate
    flashmapAuthor
    Participant
    Oct 15, 2024 6:21 PM UTC

    Will do.  Thanks, Vikram.

    Translate
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices