How To Fix SAML2061 - Signature of message '&1' from issuer '&2' is invalid

SAML2061 - Overview

• Message type: E = Error

• Message class: SAML2 - SAML2 Nachrichten

• Message number: 061

• Message text: Signature of message '&1' from issuer '&2' is invalid

What causes this issue?

The signature check in the SAML message &V1& was not successful. The
reason can be one of the following:
The public key ( certificate ) of entity &V2& is missing from the PSE
file.
The key ( certificate ) of the issuer &V2& is flawed.

System Response

The signature check was unsucessful and the SAML message could not be
processed.

How to fix this error?

Check the entries in the developer trace of the application server.
Check the entries for keys in the SAML2 PSE. In transaction STRUST,
compare the certificates of the corresponding PSE with those that your
SAML2 partner provided.

Procedure for System Administrators

Check the existence of the partner certificates and their correctness.
Errors occur, for example, when the certificate has expired, or the when
the certificate requires a chain of certificates to check the signature.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SAML2061 - Signature of message '&1' from issuer '&2' is invalid ?

  The SAP error message SAML2061 indicates that there is an issue with the signature of a SAML (Security Assertion Markup Language) message. Specifically, it states that the signature of the message is invalid, which can prevent successful authentication or authorization processes in systems that rely on SAML for Single Sign-On (SSO) or federated identity management.
  Causes of SAML2061
  
  
  Invalid Signature: The signature of the SAML assertion may not match the expected signature. This can happen if the assertion was tampered with or if there is a mismatch in the signing keys.
  
  
  Certificate Issues: The certificate used to sign the SAML assertion may not be trusted by the receiving system. This could be due to:
  
  The certificate not being installed in the trust store.
  The certificate being expired or revoked.
  A mismatch between the signing certificate and the one configured in the SAP system.
  
  
  
  Configuration Errors: There may be misconfigurations in the SAML settings, such as:
  
  Incorrect issuer URL.
  Wrong