-->

1. The Credential Selected For Signing Is Invalid Adobe
2. The Credential Selected For Signing Is Invalid Adobe After Effects

My digital signatures no longer work the credential selected for signing is invalid Digital signature has stopped working in Acrobat Pro 9 OS 10 has prompted a requestion to uncheck a box next to open in 32 bit..howver the box is already unchecked..itunes no longer works in OS 10 for me! Dang. Any. Manage your Adobe Account profile, password, security options, product and service subscriptions, privacy settings, and communication preferences.

To use password-based single sign-on (SSO) in My Apps, the browser extension must be installed. The extension downloads automatically when you select an app that's configured for password-based SSO. To learn about using My Apps from an end-user perspective, see My Apps portal help.

My Apps browser extension not installed

Make sure the browser extension is installed. To learn more, see Plan an Azure Active Directory My Apps deployment.

Single sign-on not configured

Make sure password-based single sign-on is configured. To learn more, see Configure password-based single sign-on.

Users not assigned

The Credential Selected For Signing Is Invalid Adobe

Make sure the user is assigned to the app. To learn more, see Assign a user or group to an app.

Credentials are filled in, but the extension does not submit them

This problem typically happens if the application vendor has changed their sign-in page recently to add a field, changed an identifier used for detecting the username and password fields, or modified how the sign-in experience works for their application. Fortunately, in many instances, Microsoft can work with application vendors to rapidly resolve these issues.

While Microsoft has technologies to automatically detect when integrations break, it might not be possible to find the issues right away, or the issues take some time to fix. In the case when one of these integrations does not work correctly, open a support case so it can be fixed as quickly as possible.

If you are in contact with this application’s vendor, send them our way so Microsoft can work with them to natively integrate their application with Azure Active Directory. You can send the vendor to the Listing your application in the Azure Active Directory application gallery to get them started.

Credentials are filled in and submitted, but the page indicates the credentials are incorrect

To resolve this issue, first try these things:

• Have the user first try to sign in to the application website directly with the credentials stored for them.

  • If sign-in works, then have the user click the Update credentials button on the Application Tile in the Apps section of My Apps to update them to the latest known working username and password.

  • If you, or another administrator assigned the credentials for this user, find the user or group’s application assignment by navigating to the Users & Groups tab of the application, selecting the assignment and clicking the Update Credentials button.

• If the user assigned their own credentials, have the user check to be sure that their password has not expired in the application and if so, update their expired password by signing in to the application directly.

  • After the password has been updated in the application, request the user to click the Update credentials button on the Application Tile in the Apps section of My Apps to update them to the latest known working username and password.

  • If you, or another administrator assigned the credentials for this user, find the user or group’s application assignment by navigating to the Users & Groups tab of the application, selecting the assignment and clicking the Update Credentials button.

• Ensure that the My Apps browser extension is running and enabled in your user’s browser.

• Ensure that your users are not trying to sign in to the application from My Apps while in incognito, inPrivate, or Private mode. The My Apps extension is not supported in these modes.

In case the previous suggestions do not work, it could be the case that a change has occurred on the application side that has temporarily broken the application’s integration with Azure AD. For example, this can occur when the application vendor introduces a script on their page which behaves differently for manual vs automated input, which causes automated integration, like our own, to break. Fortunately, in many instances, Microsoft can work with application vendors to rapidly resolve these issues.

While Microsoft has technologies to automatically detect when application integrations break, it might not be possible to find the issues right away, or the issues might take some time to fix. When an integration does not work correctly, you can open a support case to get it fixed as quickly as possible.

In addition to this, if you are in contact with this application’s vendor,send them our way so we can work with them to natively integrate their application with Azure Active Directory. You can send the vendor to the Listing your application in the Azure Active Directory application gallery to get them started.

Check if the application’s login page has changed recently or requires an additional field

If the application’s login page has changed drastically, sometimes this causes our integrations to break. An example of this is when an application vendor adds a sign-in field, a captcha, or multi-factor authentication to their experiences. Fortunately, in many instances, Microsoft can work with application vendors to rapidly resolve these issues.

While Microsoft has technologies to automatically detect when application integrations break, it might not be possible to find the issues right away, or the issues might take some time to fix. When an integration does not work correctly, you can open a support case to get it fixed as quickly as possible.

In addition to this, if you are in contact with this application’s vendor,send them our way so we can work with them to natively integrate their application with Azure Active Directory. You can send the vendor to the Listing your application in the Azure Active Directory application gallery to get them started.

Capture sign-in fields for an app

Sign-in field capture is supported only for HTML-enabled sign-in pages. It's not supported for non-standard sign-in pages, like those that use Adobe Flash or other non-HTML-enabled technologies.

There are two ways to capture sign-in fields for your custom apps:

• Automatic sign-in field capture works well with most HTML-enabled sign-in pages, if they use well-known DIV IDs for the user name and password fields. The HTML on the page is scraped to find DIV IDs that match certain criteria. That metadata is saved so that it can be replayed to the app later.

• Manual sign-in field capture is used if the app vendor doesn't label the sign-in input fields. Manual capture is also used if the vendor renders multiple fields that can't be auto-detected. Azure Active Directory (Azure AD) can store data for as many fields as there are on the sign-in page, if you tell it where those fields are on the page.

In general, if automatic sign-in field capture doesn't work, try the manual option.

Automatically capture sign-in fields for an app

To configure password-based SSO by using automatic sign-in field capture, follow these steps:

1. Open the Azure portal. Sign in as a global administrator or co-admin.
2. In the navigation pane on the left side, select All services to open the Azure AD extension.
3. Type Azure Active Directory in the filter search box, and then select Azure Active Directory.
4. Select Enterprise Applications in the Azure AD navigation pane.
5. Select All Applications to view a list of your apps.

   Note

   If you don't see the app that you want, use the Filter control at the top of the All Applications list. Set the Show option to 'All Applications.'

6. Select the app that you want to configure for SSO.
7. After the app loads, select Single sign-on in the navigation pane on the left side.
8. Select Password-based Sign-on mode.
9. Enter the Sign-on URL, which is the URL of the page where users enter their user name and password to sign in. Make sure that the sign-in fields are visible on the page for the URL that you provide.
10. Select Save.The page is automatically scraped for the user name and password input boxes. You can now use Azure AD to securely transmit passwords to that app by using the My Apps browser extension.

Manually capture sign-in fields for an app

To manually capture sign-in fields, you must have the My Apps browser extension installed. Also, your browser can't be running in inPrivate, incognito, or private mode.

To configure password-based SSO for an app by using manual sign-in field capture, follow these steps:

1. Open the Azure portal. Sign in as a global administrator or co-admin.
2. In the navigation pane on the left side, select All services to open the Azure AD extension.
3. Type Azure Active Directory in the filter search box, and then select Azure Active Directory.
4. Select Enterprise Applications in the Azure AD navigation pane.
5. Select All Applications to view a list of your apps.

   Note

   If you don't see the app that you want, use the Filter control at the top of the All Applications list. Set the Show option to 'All Applications.'

6. Select the app that you want to configure for SSO.
7. After the app loads, select Single sign-on in the navigation pane on the left side.
8. Select Password-based Sign-on mode.
9. Enter the Sign-on URL, which is the page where users enter their user name and password to sign in. Make sure that the sign-in fields are visible on the page for the URL that you provide.
10. Select Configure <appname> Password Single Sign-on Settings.
11. Select Manually detect sign-in fields.
12. Select Ok.
13. Select Save.
14. Follow the instructions to use My Apps.

Troubleshoot problems

I get a “We couldn’t find any sign-in fields at that URL” error

You get this error message when automatic detection of sign-in fields fails. To resolve the issue, try manual sign-in field detection. See the Manually capture sign-in fields for an application section of this article.

I get an “Unable to save single sign-on configuration” error

Rarely, updating the SSO configuration fails. To resolve this problem, try saving the configuration again.

If you keep getting the error, open a support case. Include the information that's described in the View portal notification details and Send notification details to a support engineer to get help sections of this article.

I can't manually detect sign-in fields for my app

You might observe the following behaviors when manual detection isn't working:

• The manual capture process appeared to work, but the captured fields aren't correct.
• The correct fields don’t get highlighted when the capture process runs.
• The capture process takes you to the app’s sign-in page as expected, but nothing happens.
• Manual capture appears to work, but SSO doesn’t happen when users navigate to the app from My Apps.

The Credential Selected For Signing Is Invalid Adobe After Effects

If you experience any of these problems, do the following things:

• Make sure that you have the latest version of the My Apps browser extension installed and enabled.
• Make sure that your browser isn't in incognito, inPrivate, or Private mode during the capture process. The My Apps extension isn't supported in these modes.
• Make sure that your users aren't trying to sign in to the app from My Apps while in incognito, inPrivate, or Private mode.
• Try the manual capture process again. Make sure that the red markers are over the correct fields.
• If the manual capture process seems to stop responding or the sign-in page doesn’t respond, try the manual capture process again. But this time, after completing the process, press the F12 key to open your browser’s developer console. Select the console tab. Type window.location='<the sign-in URL that you specified when configuring the app>', and then press Enter. This forces a page redirect that ends the capture process and stores the fields that were captured.

I can't add another user to my Password-based SSO app

Password-based SSO app has a limit of 48 users. Thus, it has a limit of 48 keys for username/password pairs per app.If you want to add additional users you can either:

• Add additional instance of the app
• Remove users who are no longer using the app first

Request support

If you get an error message when you set up SSO and assign users, open a support ticket. Include as much of the following information as possible:

• Correlation error ID
• UPN (user email address)
• TenantID
• Browser type
• Time zone and time/time frame when the error occurred
• Fiddler traces

View portal notification details

To see the details of any portal notification, follow these steps:

1. Select the Notifications icon (the bell) in the upper-right corner of the Azure portal.
2. Select any notification that shows an Error state. (They have a red '!'.)

   Note

   You can't select notifications that are in the Successful or In Progress state.

3. The Notification Details pane opens. Read the information to learn about the problem.
4. If you still need help, share the information with a support engineer or the product group. Select the copy icon to the right of the Copy error box to copy the notification details to share.

Send notification details to a support engineer to get help

It's important that you share all the details that are listed in this section with support so that they can help you quickly. To record it, you can take a screenshot or select Copy error.

The following information explains what each notification item means and provides examples.

Essential notification items

• Title: the descriptive title of the notification.

  Example: Application proxy settings

• Description: what occurred as a result of the operation.

  Example: Internal URL entered is already being used by another application.

• Notification ID: the unique ID of the notification.

  Example: clientNotification-2adbfc06-2073-4678-a69f-7eb78d96b068

• Client Request ID: the specific request ID that your browser made.

  Example: 302fd775-3329-4670-a9f3-bea37004f0bc

• Time Stamp UTC: the timestamp of when the notification occurred, in UTC.

  Example: 2017-03-23T19:50:43.7583681Z

• Internal Transaction ID: the internal ID that's used to look up the error in our systems.

  Example: 71a2f329-ca29-402f-aa72-bc00a7aca603

• UPN: The user who ran the operation.

  Example: tperkins@f128.info

• Tenant ID: the unique ID of the tenant that the user who ran the operation is a member of.

  Example: 7918d4b5-0442-4a97-be2d-36f9f9962ece

• User object ID: The unique ID of the user who ran the operation.

  Example: 17f84be4-51f8-483a-b533-383791227a99

Detailed notification items

• Display Name: (can be empty) a more-detailed display name for the error.

  Example: Application proxy settings

• Status: the specific status of the notification.

  Example: Failed

• Object ID: (can be empty) the object ID against which the operation was run.

  Example: 8e08161d-f2fd-40ad-a34a-a9632d6bb599

• Details: the detailed description of what occurred as a result of the operation.

  Example: Internal url 'https://bing.com/' is invalid since it is already in use.

• Copy error: Enables you to select the copy icon to the right of the Copy error textbox to copy the notification details to help with support.

  Example:{'errorCode':'InternalUrl_Duplicate','localizedErrorDetails':{'errorDetail':'Internal url 'https://google.com/' is invalid since it is already in use'},'operationResults':[{'objectId':null,'displayName':null,'status':0,'details':'Internal url 'https://bing.com/' is invalid since it is already in use'}],'timeStampUtc':'2017-03-23T19:50:26.465743Z','clientRequestId':'302fd775-3329-4670-a9f3-bea37004f0bb','internalTransactionId':'ea5b5475-03b9-4f08-8e95-bbb11289ab65','upn':'tperkins@f128.info','tenantId':'7918d4b5-0442-4a97-be2d-36f9f9962ece','userObjectId':'17f84be4-51f8-483a-b533-383791227a99'}

Next steps

This sample has been tested and verified on:

• Adobe Digital Enterprise Platform, version 10.0
• LiveCycle ES2, version 9.x

Overview of the sample
Files needed for the sample
Deploying the sample
Configuring the sample
Running the sample
Legal disclaimer

Overview of the sample

The Add Signature Validation Info sample automates the addition of validation-related information to the signed or certified PDF documents using Digital Signatures.

The process is triggered when a PDF document is placed in a watched folder.

The process checks whether the PDF document contains a signature. If it does, it continues to validate the signature. If the signature is valid, the validation-related information for that signature is added to the PDF document. Output is then written to a folder holding validated documents. If, the signature is not valid or if any exceptions happened during the validation process, the document is not updated. The unchanged document is stored in a folder holding invalid documents.

Solution Components used:

• SignatureService

• Get Signature Field List: Returns a list of all the signaturefields located within a PDF document. You can retrieve the names of all the signaturefields in a PDF document for signing or certifying.
• Add Signature Validation Info: Adds signaturevalidationinformation for long-term validation of digital signatures applied to a PDF document.

Files needed for the sample

Deploying the sample

Tip: To deploy multiple samples, use the Samples Deploy Utility.

Note: These instructions assume that Document Services/LiveCycle ES2 is installed on the C: drive on Microsoft Windows. If you have installed to a different location, substitute the directory where you installed Document Services/LiveCycle ES2.

1. Check the following folder in the file system on the server where Document Services/LiveCycle is installed, if it exists, delete it before proceed.

   Windows	C:tmpLCSamplesWatchedFolderDigitalSignaturesAddSignatureValidationInfo
   Unix	/tmp/LCSamples/WatchedFolder/DigitalSignatures/AddSignatureValidationInfo

2. Log in to Administration Console (http://[hostname]:[port]/adminui).
3. Click Services > Applications and Services > Application Management.
4. Click the LiveCycle Applications (9.x) tab and click Import.
5. Click Browse to locate the sample archive (LCA) file Adobe-Samples-Service-DigitalSignatures.lca, and then click Preview.
6. Select Deployassets to runtime when import is complete and click Import.

Configuring the sample

Configure certificate

In the following steps, you need three certificate files: DSSTSCA.cer, Perf_ValidcrlICA.cer, and PerfCA.cer. They are located at the subfolder Resources of folder collateral within the ZIP file Adobe-Samples-Service-DigitalSignatures.zip.

1. Log in to Administration Console (http://[hostname]:[port]/adminui).
2. Click Home > Settings > Trust Store Management > Certificates.
3. Click Import and on the Import Credential page specify this information:
   - Trust Store Type: enable all the Trust Anchors except Trust for SSL connections
   - Alias: Dssts
   - Credential: DSSTSCA.cer
4. Click OK to import the certificate and return to the Local Credentials page.
5. Click Import and on the Import Credential page, specify this information:
   - Trust Store Type: enable all the Trust Anchors except Trust for SSL connections
   - Alias: Perf
   - Credential: PerfCA .cer
6. Click OK to import the certificate and return to the Local Credentials page.
7. Click Import and on the Import Credential page, specify this information:
   - Trust Store Type: do not check any check box
   - Alias: Perf_Validcrl
   - Credential: Perf_ValidcrlICA.cer
8. Click OK to import the certificate.

Running the sample

1. Open the collateral folder within the downloaded ZIP file, Adobe-Samples-Service-DigitalSignatures.zip. Expand the subfolder Input, drop the Input_file.pdf file into the watched folder, C:tmpLCSamplesWatchedFolderDigitalSignaturesAddSignatureValidationInfoinput on Windows, /tmp/LCSamples/WatchedFolder/DigitalSignatures/AddSignatureValidationInfo/input on Unix.
2. The output PDF file is written out to C:tmpLCSamplesOutputDigitalSignaturesAddSignatureValidationInfoValid on Windows or /tmp/LCSamples/Output/DigitalSignatures/AddSignatureValidationInfo/Valid on Unix. Verify that the signature is added:
   - Open the output PDF document using Acrobat.
   - Select Advanced > Preflight
   - In the Preflight dialog box, click Options on the upper-right corner.
   - Select Browse Internal PDF structure.
   - Click the Browse internal document structure icon at the upper left of the dialog box showed in the following figure.
   - Expand The document root Catalog. Notice a 'DSS' directory is created at the time of validation.
   Note: The 'Preflight' selection can be found in the Acrobat X (View -> Tools -> Print Production -> Preflight).
3. Open the collateral folder within the downloaded ZIP file Adobe-Samples-Service-DigitalSignatures.zip again. Expand the subfolder Input, drop the Input_file_NotSigned.pdf file into the input subfolder of the watched folder C:tmpLCSamplesWatchedFolderDigitalSignaturesAddSignatureValidationInfoinput on Windows, /tmp/LCSamples/WatchedFolder/DigitalSignatures/AddSignatureValidationInfo/input on Unix.
4. The output PDF file is written out to C:tmpLCSamplesOutputDigitalSignaturesAddSignatureValidationInfoInvalid on Windows or /tmp/LCSamples/Output/DigitalSignatures/AddSignatureValidationInfo/Invalid on Unix. The Invalid folder (as specified in the step 'Configure watched folder'). Notice that the PDF file is the same as the input PDF file. The input PDF file has not been signed, therefore signature validation information cannot be added.

Legal disclaimer

Any references to company names, company logos and user names in sample material or sample forms included in this documentation and/or software are for demonstration purposes only and are not intended to refer to any actual organization or persons.

Service Sample - Document Services/LiveCycle ES2 Digital Signatures - Add Signature Validation Info - 08/03/2011 7:54 PM
August 2011