Office 365 SSO

[scl-family_1]

I want to do SSO with Office 365 using thirds Party IDP. After successfully authenticated from IDP got below error .

Please find error for POST request:-

POST error: invalid_grant

error_description: AADSTS70002: Error validating credentials. AADSTS50008: Unable to verify token signature. The signing key identifier does not match any valid registered keys.

I have found above error through SAML tracer plugin in Firefox.

[#2]

Hi,

There is difference in token signing certificate causing this error , Please make sure Token Signing certificate on the IDP and in O365 are matches, if not update them.
It will all work just fine ... please refer this article for step by step procedure

http://edoras.sk/sso-issue-with-aadsts50008-unable-to-verify-token-signature/