You use SAML 2.0 SP on AS ABAP and on the IdP side the signing certificate has changed. Therefore the signature verification of the Response fails with errors like:
The validation of message 'Response' failed. Long text: The validation of message 'Response' failed.
Details: SSFW_KRN_VERIFY failed with: Signature verification failed (for signer) or Envelope failed (for recipient)
Signature validation with the configured primary certificate failed.
SAML 2.0 Service Provider (SP) on AS ABAP
SAML 2.0, SAML 2.0, renew certificate, verify signature, trusted provider, primary signing certificate, secondary signing certificate, SSFW_KRN_VERIFY, The validation of message 'Response' failed, X.509 certificate, , KBA , BC-SEC-LGN-SML , SAML 2.0 for ABAP , How To
About this pageThis is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).
Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.