2604216 - SAML authentication fails on HANA XSA - Signature is not trusted or invalid

When trying to logon to XSA using a SAML Identity Provider, the following message is displayed on screen:

Response doesn't have any valid assertion which would pass subject validation

The following record can be found in the uaa.log file

XMLSignature: Signature verification failed
Caused by: org.opensaml.xml.validation.ValidationException: Signature is not trusted or invalid

SAP HANA, platform edition 2.0

KBA , BC-XS-SEC , UAA and Security for HANA XSA engine , Problem

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Visit SAP Support Portal's SAP Notes and KBA Search.