Skip to main content
Panther Knowledge Base

Error "Invalid SAML response received: SAML Response signature is invalid" when logging into Panther using Google WorkSpace SSO

  1. Last updated
  2. Save as PDF

Issue

 I enabled SSO and performed all the documented steps, but I'm unable to log into Panther using SSO via Google Workspace. I'm getting the error message Invalid SAML response received: SAML Response signature is invalid. 

Resolution

To resolve this issue, follow these steps:

  1. Navigate to your IdP’s application configuration page and then fetch the updated metadata file.
  2. Open the Panther Console.
  3. Navigate to the configuration for SAML section of our Identity & Access tab in the General Settings.
  4. Replace the existing metadata file with the updated metadata file.

 

For additional troubleshooting:

To identify more details about this behavior, please check the Network tab of the Developer Tools in your browser and keep a note of the Name and Status columns, in order to gather additional context about the issue.

In addition, please confirm inside of Google that the SAML attribute mappings match what’s described in our documentation for creating the GSuite app. Specifically these three:

  • PantherEmail
  • PantherFirstName
  • PantherLastName

Cause

The URL in the login page gives us a hint that there’s something wrong with the SAML assertion signature. The issue is expected to be resolved when following the steps described above.