# Turning off AuthnRequest signing for SAML client

**URL:** <https://forum.keycloak.org/t/turning-off-authnrequest-signing-for-saml-client/22583>\
**Category:** Configuring the server\
**Created:** [June 9, 2023, 12:36pm UTC](https://forum.keycloak.org/t/turning-off-authnrequest-signing-for-saml-client/22583 "2023-06-09T12:36:36Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![krisleech](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/krisleech/32/8732_2.png) [@krisleech](https://forum.keycloak.org/u/krisleech)\
**Post date:** [June 9, 2023, 12:36pm UTC](https://forum.keycloak.org/t/turning-off-authnrequest-signing-for-saml-client/22583/1 "2023-06-09T12:36:36Z")

</div>

I believe Keycloak is expecting each SAML Request (AuthnRequest) to be signed. The Service Provider does not support signed SAML Requests.

The error I am getting is `SigAlg was null`

```auto
request validation failed: org.keycloak.common.VerificationException: SigAlg was null

2023-06-09 10:57:55,436 WARN [org.keycloak.events] (executor-thread-72) type=LOGIN_ERROR, realmId=d162e9db-f175-47fb-bef4-249f144b453f, clientId=null, userId=null, ipAddress=172.17.0.1, error=invalid_signature

```

I thought turning off signing for the SAML client would fix this:

![Screenshot 2023-06-09 at 13.19.59](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/7/72f18e4aa6d15795d91aaebff1b6c2d9276f7b9b.png)

But I think this might just relate to the SAML Authentication response, i.e. Assertion.

In the metadata I still see `WantAuthnRequestsSigned="false"`.

I’m using KeyCloak 21.1.1 in Docker.

Any help or pointers would be much appreciated.