SHA-256 for Enhanced SSO Security | Axero Documentation

As of June 2023, Axero requires the SHA-256 hashing algorithm for all SAML transactions to enhance security. This update replaces the older SHA-1 algorithm, addressing its vulnerabilities and improving the security of your single sign-on (SSO) integrations.

If you use SSO, follow these steps to ensure a smooth transition.

Steps to Upgrade

1. Verify Your SSO Configuration

   • Check Current Setup: Confirm if your SSO configuration already uses SHA-256. If it does, no further action is needed.

   • Upgrade if Needed: If your SSO uses SHA-1, an upgrade to SHA-256 is necessary.

2. Configure Your Identity Provider (IdP)

   • Update to SHA-256: Contact your SSO provider for instructions on upgrading to SHA-256.

     • Active Directory Federation Services (AD FS)

     • Azure Active Directory/Entra ID

     • Okta

     • OneLogin

   • Provider Assistance: Providers usually have tools or instructions to help with this process.

3. Test Your SSO Integration

   • Confirm SHA-256 Use: Perform a SAML Trace and check for SHA-256 in the trace data.

   • Successful Logins: Ensure successful logins to verify the correct SHA-256 setup.

What to Do If You Encounter Issues

If your site is upgraded without transitioning to SHA-256, SSO users may lose access. Exception logs will note errors due to SHA-1.

Follow the steps above to upgrade to SHA-256. If locked out, please contact our support team.