SAP Knowledge Base Article - Preview

3784963 - SAML encrypted assertion rejected: service provider requires rsa-oaep, not rsa pkcs#1 v1.5

Symptom

  • Authentication with the service provider fails when encrypted SAML assertions are used.
  • Error message: "The SAML encrypted assertion uses RSA PKCS#1 v1.5 key transport which is not allowed. The identity provider must use RSA-OAEP key encryption."
  • Disabling SAML response encryption avoids the failure.


Read more...

Environment

  • SAP Customer Data Cloud
  • Admin Console (Settings, Administration, Queries / Reports)

Product

SAP Customer Data Cloud all versions

Keywords

saml, encrypted assertion, rsa-oaep, rsa pkcs#1 v1.5, key transport, encryption, identity provider, service provider, response encryption, cdc, customer data cloud, saml idp, algorithm deprecation, oaep, pkcs1 v1.5 , KBA , CEC-PRO-CON , Admin Console (Settings, Administration, Queries / Reports) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.