Last tested: Oct 19, 2020
If the signature is not authenticating, you will know by this error message:
'signature' param failed to authenticate
- The SSO secret in the Looker instance and the SSO secret in the SSO embed script are not the same.
- The signature portion of the embed parameters are being concatenated in the wrong order in the URL generation script (proper order is doc'd here)
- There is a line break in one of the parameters that makes up the URL, which can be missed after encoding
- The script is modifying the signature after generating it, or failing to encode it properly (compare against our script examples).