Article - CS315053
"Unable to verify the signature" is seen when using Single Sign-on (SSO) with ThingWorx Platform/ThingWorx Navigate
Modified: 31-Jul-2025
Applies To
- Windchill Navigate (formerly ThingWorx Navigate) 1.5.0 to 10.0
- ThingWorx Platform 8.3 to 9.7
Description
- Login to ThingWorx Navigate with SSO configuration fails with Unable to verify the signature
- Cannot sign into ThingWorx Platform with SSO enabled
- Unable to use ThingWorx with PingFederate due to signature issue
- Signature error is seen when EnableSSO is set to true on ThingWorx Platform with PingFed
- Getting error in Thingworx Navigate UI when SSO is configured as
The system is currently encountering an authentication configuration error. Close the browser and try to login again. If the problem persists, contact your system administrator.
- SecurityLog.log file in <ThingworxStorage>\logs shows the following:
[L: ERROR] [O: S.c.t.s.a.AuthenticatorExceptionHandler] [I: ] [U: ] [S: ] [T: https-jsse-nio-8443-exec-10] [ Error validating SAML message ][ Response has invalid status code urn:oasis:names:tc:SAML:2.0:status:Responder, status message is Unable to verify the signature ]
This is a printer-friendly version of Article 315053 and may be out of date. For the latest version click CS315053