SAP Knowledge Base Article - Preview

3772954 - SAML Login Fails with "Certificate Is Not a Valid X.509 Certificate" During Signature Validation in SAP Sales Agent Performance Management

Symptom

  • SSO login to Agent Performance Management (APM) fails with a "SAML Failure" error.
  • Application logs contain the message:

    "Certificate is not a valid x.509 Certificate. Note the certificate should have the BEGIN and END CERTIFICATE Headers. See PEM encoding."

  • In some cases, users are redirected to a 404 – Sales Cloud page.
  • Standard (non-SSO) authentication succeeds.


Read more...

Environment

  • SAP Sales Performance Management
    • Agent Performance Management

Product

SAP Agent Performance Management 2026

Keywords

saml failure, apm sso, agent performance management, x.509 certificate, pem encoding, begin certificate, end certificate, signature validation, idp signing certificate, sp-initiated, idp-initiated, 404 error, saml response, sso error , KBA , CEC-SAL-APE , Agent Performance Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.