SAML Setup

[Cortland 0]

I just signed up for the minimal 2 user trial to verify that SAML can work but when I go into Admin Console > Single Sign-On > SAML HTTP Request URL + X.509 Certificate and click Save & Enable > get redirected to the IdP > authenticate successfully > get redirected back to evernote which displays the following error:

https://www.evernote.com/SamlConsumer.action
The signature on this security assertion didn't pass validation. The X.509 certificate that your company has provided may be out of date.
Please relay the above message to your Evernote Business admin for help.

The cert is not out of date.

Any ideas as to what the problem might be?

Do I need to upgrade the subscription or something (that would be strange since I'm able to edit the SAML settings)?

 

 

[gazumped 11,667]

Hi.  I have no idea what you're talking about.  We're mainly other users here - have you tried Evernote Support??

[PinkElephant 8,117]

Did you follow this setup logic by Google ?

https://support.google.com/a/answer/7390010?hl=en

From what it tells it is designed to work with an EN Teams (Business) Account, and you must be the account admin to set it up. From what you are talking concerning a „minimal 2 user trial“ it might be you are trying to set it up for a Free account. Taking the Google description this will probably not work.

To be sure, ask support. If you can’t ask support, it is because only subscribers can do … which would prove my assumption.

[San5675346 0]

I just signed up evernote and configured single sign on for my account. It successfully redirects to my IDP but it get redirected back to ever note saying "Evernote requires signed SAML responses" But my saml reponse is signed. Can anyone help me with this?

[gazumped 11,667]

2 hours ago, San5675346 said:

I just signed up evernote and configured single sign on for my account. It successfully redirects to my IDP but it get redirected back to ever note saying "Evernote requires signed SAML responses" But my saml reponse is signed. Can anyone help me with this?

Hi.  See other comments in this post.  Or contact Support (response times currently s-l-o-w).