# عدم تطابق بصمة SAML

**URL:** https://meta.discourse.org/t/saml-fingerprint-mismatch/89140
**Category:** SSO
**Created:** [4 يونيو 2018، 8:52م UTC](https://meta.discourse.org/t/saml-fingerprint-mismatch/89140 "2018-06-04T20:52:58Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![yrs](https://avatars.discourse-cdn.com/v4/letter/y/ebca7d/32.png) [@yrs](https://meta.discourse.org/u/yrs)
#### Post date: [4 يونيو 2018، 8:52م UTC](https://meta.discourse.org/t/saml-fingerprint-mismatch/89140/1 "2018-06-04T20:52:58Z")

</div>

Hello Discourse Devs,

We are seeing the following error:

(saml) Authentication failure! invalid\_ticket: OneLogin::RubySaml::ValidationError, Fingerprint mismatch

I’ve verified the fingerprint by generating a SHA256 finger print from the following site:

> **[SAML X.509 Certificate Fingerprint - Online SHA1 Decoder | SAMLTool.com](https://www.samltool.com/fingerprint.php)**
>
> Easy online tool to calculate the fingerprint of a X.509 certificate.

Any thoughts on what else I could check?

---

<div class="post-metadata">

### Author: ![frsc](https://avatars.discourse-cdn.com/v4/letter/f/e19b73/32.png) [@frsc](https://meta.discourse.org/u/frsc)
#### Post date: [24 نوفمبر 2018، 12:32م UTC](https://meta.discourse.org/t/saml-fingerprint-mismatch/89140/2 "2018-11-24T12:32:38Z")

</div>

I think you have to use SHA1 (the fingerprints hash algorithm is independent of the certificates algorithm). At least in my case that worked.  
I copied the base64 certificate of my IdP including `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----` to a file and used the following OpenSSL command to retrieve the fingerprint:

```plaintext
openssl x509 -noout -fingerprint -sha1 -inform pem -in cert.pem

```