Resolve an SSO Invalid Thumbprint Error

Symptom

If you use single sign-on (SSO) and attempt to log in to the Samsara dashboard, you may receive a Bad request: invalid thumbprint(configured: xxx Calculated: xxx) error.

Cause

The error message suggests that the system has attempted to validate a certificate by comparing the thumbprint (hash) of the certificate it has received against a configured thumbprint value that it expects. If the thumbprint of the received certificate doesn't match the expected or configured thumbprint, the dashboard displays this error. This occurs when the x.509 certs in your Samsara SSO configuration don’t match the x.509 certs in your IDP configuration.

Solution

1. Verify your Identity Provider’s configuration or reach out to your Identify provider (for example, Azure) to find the correct x.509 certs.

2. On the Samsara dashboard, edit your SSO configuration to update the x.509 Certificate. For more information, see Renew an x.509 Certificate.