I see the SSO error "Invalid signature or certificate is not valid"

Follow these steps when:

• You try to sign in to Riverside with your organization's SSO and get the error:
  • "Invalid signature or certificate is not valid."

Likely causes:

The certificate uploaded in Riverside doesn't match the certificate in your organization's SSO provider.

Suggested troubleshooting steps

• If your organization is using Microsoft Azure SSO (Entra ID), contact your IT team to:
  1. Update the SSO certificate so it's valid (not expired). See step 39 here. 
     • As a best practice, the expiration date should be set to the end of your Riverside contract term to avoid interruptions.
  2. Confirm the active signing certificate in your SSO provider.
  3. Send that exact certificate to Support so we can upload it to your account.
• If your organization is using another SSO provider, contact your IT team to:
  1. Confirm the active signing certificate in your SSO provider.
  2. Once confirmed, send that exact certificate to Support so we can upload it to your account.
• If the issue continues, share a screenshot of your SSO configuration in Riverside and a screenshot of the corresponding settings in your identity provider (IdP), so we can help pinpoint what may be missing.