Symptom
While troubleshooting blank/loading screen issues when creating/running Story reports via Report Center, you followed KBA 3508799 and encountered an error when accessing the SAC URL in a parallel tab.
The SAML trace shows the message: <StatusMessage>The digital signature of the received SAML2 message is invalid.</StatusMessage>
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
SAP SuccessFactors HCM Suite
Reproducing the Issue
- Follow the KBA 3508799 - How to collect SAML traces for Story troubleshooting
- When opening the SAC URL in a parallel tab, as described in the KBA, one of the errors below is displayed:
OR
The SAML trace shows the message: <StatusMessage>The digital signature of the received SAML2 message is invalid.</StatusMessage>
Cause
Wrong certificate set for SAP Analytics in IAS (IAS > Application and Resources > Application > SAP Analytics > SAML 2.0 Configuration > Signing Certificate).
Resolution
It is not possible to fix the certificate manually, this needs to be do via update job. Please follow the steps below to fix it:
- Customer needs to delete "SAP Analytics" application from IAS
- Support team needs to execute the "Update IAS/IPS configuration for Stories in People Analytics" job, from Provisioning > Manage Scheduled Jobs
See Also
3508788 - How to set SAML tracer extension in the browser for Story troubleshooting
3508799 - How to collect SAML traces for Story troubleshooting
2912865 - [Main KBA] Unable to access Story reports - People Analytics
Keywords
The digital signature of the received SAML2 message is invalid, certificate, SAC, story, stories, blank screen, loading screen, people analytics, report center , KBA , LOD-SF-ANA-SAC , Stories in People Analytics , LOD-SF-ANA-SAC-IAS , IAS configurations , Problem