Description
This article describes the error 'AADSTS76023: The signature of the received authentication request is invalid, please contact the administrator to resolve the issue' when connecting to the FortiSASE VPN.
Scope
FortiSASE.
Solution
The users may encounter issues when attempting to connect to the VPN, receiving the following error:
The Signature element in AuthnRequest is optional. If 'Require verification certificates' is not enabled, Microsoft Entra ID will not validate signed authentication requests, even if a signature is included.'
Solution:
-
Sign in to the Microsoft Entra admin center.
-
Go to Identity -> Applications -> Enterprise applications -> All applications.
-
In the search bar, type the name of the existing application, then select it from the search results.
-
Navigate to the Single Sign-On section.
-
On the Single Sign-On page, scroll to the Verification certificates subsection under SAML Certificates.
-
Select Edit.
-
Deselect the Require verification certificates option.
