AADSTS500089: SAML 2.0 assertion validation failed: SAML token is invalid.

Question

I used a custom SAML IDP to federate, but I always get the error code.

Request Id: 2d40239e-635d-48af-9ca0-437f7a5c2900

Correlation Id: 17b56a5c-c043-40e1-af60-fba489f32ff6

Timestamp: 2020-04-24T11:19:51Z

Message: AADSTS500089: SAML 2.0 assertion validation failed: SAML token is invalid.

can anyone help

Thanks

Answer 1

@lifonghsu , This error states that the key algorithm of the certificate used is not supported. It seems, somehow the the certificate being used to SAML request to AAD is not liked by AAD and hence AAD is throwing this error.

To help you further, it would be great if you can share some more details on this app and may be screenshots of your configuration for us to understand this in a better way.

Hope this helps.

Do let us know if this helps and if there are any more queries around this, please do let us know so that we can help you further. Also, please do not forget to accept the response as Answer; if the above response helped in answering your query.

Answer 2

@lifonghsu I am also facing same issue, is that issue resolved for you?

@soumi-MSFT i tried with slef signed certificate with both SHA1 and SHA256 algorthim . getting SAME error.