Symptom

Documentation for the Secure Firewall Management Center (FMC) does not specify that the Single Sign-On (SSO) feature for FMC authentication is incompatible with identity providers (IdP) that require SAML requests to be signed.

Conditions

The use of the Single Sign-On (SSO) feature for FMC authentication on software version 6.7 or later. The integration of the FMC SSO feature with an identity provider (IdP) that requires the service provider (which is the FMC in this case) to sign all SAML requests (AuthnRequest).

Workaround

None.

Further Problem Description