{"record":{"id":"0365426782c21cc4","repo":"RocketChat/Rocket.Chat","slug":"no-valid-saml-signature-found","errorCode":null,"errorMessage":"No valid SAML Signature found","messagePattern":"No valid SAML Signature found","errorType":"exception","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"apps/meteor/server/lib/saml/lib/parsers/Response.ts","lineNumber":308,"sourceCode":"\t\t\tSAMLUtils.log('Document Signature OK');\n\t\t}\n\n\t\tif (checkAssertion) {\n\t\t\tSAMLUtils.log('Verify Assertion Signature');\n\t\t\tif (!this.validateAssertionSignature(assertionData.xml, this.serviceProviderOptions.cert, assertionData.assertion)) {\n\t\t\t\tif (!checkEither) {\n\t\t\t\t\tSAMLUtils.log('Assertion Signature WRONG');\n\t\t\t\t\tthrow new Error('Invalid Assertion signature');\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tanyValidSignature = true;\n\t\t\t}\n\t\t\tSAMLUtils.log('Assertion Signature OK');\n\t\t}\n\n\t\tif (checkEither && !anyValidSignature) {\n\t\t\tSAMLUtils.log('No Valid Signature');\n\t\t\tthrow new Error('No valid SAML Signature found');\n\t\t}\n\t}\n\n\tprivate validateResponseSignature(xml: string, cert: string, response: Element): boolean {\n\t\treturn this.validateSignatureChildren(xml, cert, response);\n\t}\n\n\tprivate validateAssertionSignature(xml: string, cert: string, assertion: Element): boolean {\n\t\treturn this.validateSignatureChildren(xml, cert, assertion);\n\t}\n\n\tprivate validateSignatureChildren(xml: string, cert: string, parent: Element): boolean {\n\t\tconst signatures = parent.getElementsByTagNameNS('http://www.w3.org/2000/09/xmldsig#', 'Signature');\n\t\tlet signature = null;\n\n\t\tfor (let i = 0; i < signatures.length; i++) {\n\t\t\tconst sign = signatures[i];\n\t\t\tif (sign.parentNode !== parent) {","sourceCodeStart":290,"sourceCodeEnd":326,"githubUrl":"https://github.com/RocketChat/Rocket.Chat/blob/b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0/apps/meteor/server/lib/saml/lib/parsers/Response.ts#L290-L326","documentation":"Error \"No valid SAML Signature found\" thrown in RocketChat/Rocket.Chat.","triggerScenarios":"Thrown when neither the SAML Response nor the Assertion carries a valid signature.","commonSituations":"See trigger scenarios.","solutions":["Configure the IdP to sign either the response or the assertion; unsigned responses are rejected when signature validation is required."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0","analyzedAt":"2026-08-18T15:26:39.429Z","contentChangedAt":"2026-08-18T15:26:39.429Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}