<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Error &amp;quot;Assertion can not be validated&amp;quot; [error code 401 Unathorized] when using Authentication SAML token to secure REST API on Talend ESB Open studio version 7.0 and 7.3 in Talend Studio</title>
    <link>https://community.qlik.com/t5/Talend-Studio/Error-quot-Assertion-can-not-be-validated-quot-error-code-401/m-p/2332745#M101591</link>
    <description>&lt;P&gt;&lt;B&gt;Issue encountered :&lt;/B&gt;&lt;/P&gt;&lt;P&gt;Encountered always the error "&lt;I&gt;Assertion can not be validated&lt;/I&gt;"&amp;nbsp;[&lt;I&gt;error code 401 Unathorized]&lt;/I&gt; when calling the endpoint beside client using&amp;nbsp;Authentication SAML token while the STS token was generated without issue.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;Details:&lt;/B&gt;&lt;/P&gt;&lt;P&gt;I developed a rest API on talend open studio ESB using the tRESTRequest component and activating SAML token authentication to secure client requests with a token as you can see below the Design:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtGwDAAV.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/146709i94E3DA925DCF85A1/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtGwDAAV.png" alt="0695b00000DtGwDAAV.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This job has been successfully deployed on Talend's container Runtime and the configurations are OK as you can see  below:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;1)&lt;/B&gt; &lt;U&gt;  Secure Token service (STS) activation on container Runtime (apache karaf):&lt;/U&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtG69AAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/140181i2928AC080A8A3058/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtG69AAF.png" alt="0695b00000DtG69AAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;2)&lt;/B&gt; &lt;U&gt;Deployment of the JOB on Runtime:&lt;/U&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtGwdAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/150519i2FEF402895FB146E/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtGwdAAF.png" alt="0695b00000DtGwdAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Next Generated the Token used to call the endpoint:&lt;/P&gt;&lt;P&gt;I used the following link to generate the STS Token: &lt;A href="http://coheigea.blogspot.com/2016/09/invoking-on-talend-esb-sts-using-soapui.html" alt="http://coheigea.blogspot.com/2016/09/invoking-on-talend-esb-sts-using-soapui.html" target="_blank"&gt;http://coheigea.blogspot.com/2016/09/invoking-on-talend-esb-sts-using-soapui.html&lt;/A&gt;. in fact, we ask the STS for a SAML Token by using RequestSecurityToken part on the SOAP request as below :&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH0eAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/137372i2BC20DA00BB0F3ED/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH0eAAF.png" alt="0695b00000DtH0eAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;And the SOAP Response on successful invocation of STS is shown below:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtGwxAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/131178i454A1988A2AB52C8/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtGwxAAF.png" alt="0695b00000DtGwxAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;After I switched to RAW XML and extract SAML Assertion as below :&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH2pAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/143342i1B83A51485DBBC51/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH2pAAF.png" alt="0695b00000DtH2pAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;In fact to call the REST API using an authentication token, we need to deflate and base64-encode a SAML Message before sending it like below :&lt;/P&gt;&lt;P&gt;(I used the following link &lt;A href="https://www.samltool.com/encode.php" alt="https://www.samltool.com/encode.php" target="_blank"&gt;https://www.samltool.com/encode.php&lt;/A&gt; to encode the xml response from STS)&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH3JAAV.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/145333iFD85A7075056496C/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH3JAAV.png" alt="0695b00000DtH3JAAV.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;Invocation of REST service using Postaman and a curl command:&lt;/B&gt;&lt;/P&gt;&lt;P&gt;I used this token generated to call the api on client side as below :&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Response on POSTMAN tool&amp;nbsp;to execute the api with the error  "Assertion can not be validated"&amp;nbsp;[error code 401 Unathorized]:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH4RAAV.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/148218i6C399CC4DD409CAB/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH4RAAV.png" alt="0695b00000DtH4RAAV.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So I always got this above error when testing on postman tool&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could you please see and give me what is the cause of this error and the correction that I must be made in order to remedy this error?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thank you for your feedback.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
    <pubDate>Sat, 16 Nov 2024 00:23:34 GMT</pubDate>
    <dc:creator>JHO1</dc:creator>
    <dc:date>2024-11-16T00:23:34Z</dc:date>
    <item>
      <title>Error "Assertion can not be validated" [error code 401 Unathorized] when using Authentication SAML token to secure REST API on Talend ESB Open studio version 7.0 and 7.3</title>
      <link>https://community.qlik.com/t5/Talend-Studio/Error-quot-Assertion-can-not-be-validated-quot-error-code-401/m-p/2332745#M101591</link>
      <description>&lt;P&gt;&lt;B&gt;Issue encountered :&lt;/B&gt;&lt;/P&gt;&lt;P&gt;Encountered always the error "&lt;I&gt;Assertion can not be validated&lt;/I&gt;"&amp;nbsp;[&lt;I&gt;error code 401 Unathorized]&lt;/I&gt; when calling the endpoint beside client using&amp;nbsp;Authentication SAML token while the STS token was generated without issue.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;Details:&lt;/B&gt;&lt;/P&gt;&lt;P&gt;I developed a rest API on talend open studio ESB using the tRESTRequest component and activating SAML token authentication to secure client requests with a token as you can see below the Design:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtGwDAAV.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/146709i94E3DA925DCF85A1/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtGwDAAV.png" alt="0695b00000DtGwDAAV.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This job has been successfully deployed on Talend's container Runtime and the configurations are OK as you can see  below:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;1)&lt;/B&gt; &lt;U&gt;  Secure Token service (STS) activation on container Runtime (apache karaf):&lt;/U&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtG69AAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/140181i2928AC080A8A3058/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtG69AAF.png" alt="0695b00000DtG69AAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;2)&lt;/B&gt; &lt;U&gt;Deployment of the JOB on Runtime:&lt;/U&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtGwdAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/150519i2FEF402895FB146E/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtGwdAAF.png" alt="0695b00000DtGwdAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Next Generated the Token used to call the endpoint:&lt;/P&gt;&lt;P&gt;I used the following link to generate the STS Token: &lt;A href="http://coheigea.blogspot.com/2016/09/invoking-on-talend-esb-sts-using-soapui.html" alt="http://coheigea.blogspot.com/2016/09/invoking-on-talend-esb-sts-using-soapui.html" target="_blank"&gt;http://coheigea.blogspot.com/2016/09/invoking-on-talend-esb-sts-using-soapui.html&lt;/A&gt;. in fact, we ask the STS for a SAML Token by using RequestSecurityToken part on the SOAP request as below :&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH0eAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/137372i2BC20DA00BB0F3ED/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH0eAAF.png" alt="0695b00000DtH0eAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;And the SOAP Response on successful invocation of STS is shown below:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtGwxAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/131178i454A1988A2AB52C8/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtGwxAAF.png" alt="0695b00000DtGwxAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;After I switched to RAW XML and extract SAML Assertion as below :&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH2pAAF.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/143342i1B83A51485DBBC51/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH2pAAF.png" alt="0695b00000DtH2pAAF.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;In fact to call the REST API using an authentication token, we need to deflate and base64-encode a SAML Message before sending it like below :&lt;/P&gt;&lt;P&gt;(I used the following link &lt;A href="https://www.samltool.com/encode.php" alt="https://www.samltool.com/encode.php" target="_blank"&gt;https://www.samltool.com/encode.php&lt;/A&gt; to encode the xml response from STS)&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH3JAAV.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/145333iFD85A7075056496C/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH3JAAV.png" alt="0695b00000DtH3JAAV.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;B&gt;Invocation of REST service using Postaman and a curl command:&lt;/B&gt;&lt;/P&gt;&lt;P&gt;I used this token generated to call the api on client side as below :&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Response on POSTMAN tool&amp;nbsp;to execute the api with the error  "Assertion can not be validated"&amp;nbsp;[error code 401 Unathorized]:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="0695b00000DtH4RAAV.png"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/148218i6C399CC4DD409CAB/image-size/large?v=v2&amp;amp;px=999" role="button" title="0695b00000DtH4RAAV.png" alt="0695b00000DtH4RAAV.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So I always got this above error when testing on postman tool&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could you please see and give me what is the cause of this error and the correction that I must be made in order to remedy this error?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thank you for your feedback.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Sat, 16 Nov 2024 00:23:34 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Talend-Studio/Error-quot-Assertion-can-not-be-validated-quot-error-code-401/m-p/2332745#M101591</guid>
      <dc:creator>JHO1</dc:creator>
      <dc:date>2024-11-16T00:23:34Z</dc:date>
    </item>
    <item>
      <title>Re: Error "Assertion can not be validated" [error code 401 Unathorized] when using Authentication SAML token to secure REST API on Talend ESB Open studio version 7.0 and 7.3</title>
      <link>https://community.qlik.com/t5/Talend-Studio/Error-quot-Assertion-can-not-be-validated-quot-error-code-401/m-p/2332746#M101592</link>
      <description>&lt;P&gt;Hi Guys,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Would you  please share any update or comments on the above issue I encountered ?&lt;/P&gt;&lt;P&gt;Thank you in advance for your feedback.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;JHO&lt;/P&gt;</description>
      <pubDate>Fri, 26 Mar 2021 13:02:54 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Talend-Studio/Error-quot-Assertion-can-not-be-validated-quot-error-code-401/m-p/2332746#M101592</guid>
      <dc:creator>JHO1</dc:creator>
      <dc:date>2021-03-26T13:02:54Z</dc:date>
    </item>
  </channel>
</rss>

