Unable to configure SAML using OneLogin -Uploaded Certificate is Invalid
Upon configuring SAML, if you come across the below errors:
Uploaded Certificate is Invalid (Happens with .PEM cert generated in OneLogin)
failed to update IdP details. Check logs for details
Verify the below trace in the Logs:
java.security.cert.CertificateParsingException: java.io.IOException: Duplicate extensions not allowed|
at sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:169)|
at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1804)|
at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:195)|
at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:102)|
at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:339)|
1. Create a new Certificate in OneLogin:
2. Ensure the “set CA Flag in Basic Constraints extension to “true” and keyCertSign bit for KeyUsage” is not enabled.
3. Edit the One Login configuration to use this new cert generated
4. Download the der file.
5. Try with the .der file
New to ADSelfService Plus?
Related Articles
Configuring SAML with ADFS
Step 1: Open the ADFS management application Step 2: Right-click Relying Party trust and choose Add Relying Party Trust. The Add Relying Party Trust Wizard opens. Step 3: Choose Claims Aware and click Start Step 4: Choose Enter data about the relying ...How to configure SAML with Azure AD
This guide will help us configure SAML for users who want to use Azure AD as their IdP and also give you insights on a few issues that you might run into while configuring SAML in an Azure Environment. In an ideal environment, customers will have an ...How to configure SAML with Azure AD
This guide will help us configure SAML for users who want to use Azure AD as their IdP and also give you insights on a few issues that you might run into while configuring SAML in an Azure Environment. In an ideal environment, customers will have an ...Configuring SAML with Azure (New)
Step 1: Open the Azure Portal--->Enterprise Applications. Step 2: Select the created Enterprise Application and get started with Set up Single Sign-On. Step 3: Edit the basic SAML Configuration. Step 4: Copy the Entity ID from SDPMSP and place the ...How to configure SAML with Azure AD
This guide will help us configure SAML for users who want to use Azure AD as their IdP and also give you insights on a few issues that you might run into while configuring SAML in an Azure Environment. In an ideal environment, customers will have an ...