Attempts to log in through SSO on Chrome result in this error:

Error: {“error”: “SAML response was not properly signed. Make sure to sign at least the SAML response or the assertion(s).”}

Internet Explorer 11 shows an Error 400.

Cause

This error usually appears after the SAML signing certificate was renewed at your identity provider (IdP). Zivver caches SSO metadata, including the certificate, for up to 24 hours, so it keeps validating against the old certificate until the cache expires.

Solution

See SSO login fails after renewing your identity provider’s SAML certificate for the full explanation and resolution steps.

If you use ADFS, retrieve the new Federation Metadata from the ADFS server as the first step.