# Enabling fips mode on okta

**URL:** <https://devforum.okta.com/t/enabling-fips-mode-on-okta/11650>\
**Category:** Questions\
**Created:** [November 6, 2020, 10:10pm UTC](https://devforum.okta.com/t/enabling-fips-mode-on-okta/11650 "2020-11-06T22:10:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![rtemburn](https://avatars.discourse-cdn.com/v4/letter/r/ba9def/32.png) [@rtemburn](https://devforum.okta.com/u/rtemburn)\
**Post date:** [November 6, 2020, 10:10pm UTC](https://devforum.okta.com/t/enabling-fips-mode-on-okta/11650/1 "2020-11-06T22:10:12Z")

</div>

We use oktapreview to setup our sso apps. We are trying to enable fips on our app. I saw in this page that i can go to okta verify settings and enable fips-mode encryption but i dont see that option.

[https://help.okta.com/en/prod/Content/Topics/Mobile/ov-admin-config.htm](https://help.okta.com/en/prod/Content/Topics/Mobile/ov-admin-config.htm)

 ![Screen Shot 2020-11-06 at 2.12.05 PM](https://global.discourse-cdn.com/oktadev/original/2X/9/9827f4d2a41908fe7e0b29dd388bb16c32e80762.png)

---

<div class="post-metadata">

**Author:** ![phi1ipp](https://avatars.discourse-cdn.com/v4/letter/p/85f322/32.png) [@phi1ipp](https://devforum.okta.com/u/phi1ipp)\
**Post date:** [November 8, 2020, 4:30pm UTC](https://devforum.okta.com/t/enabling-fips-mode-on-okta/11650/2 "2020-11-08T16:30:51Z")

</div>

Ask Okta support to enable this feature for your org

---

<div class="post-metadata">

**Author:** ![rtemburn](https://avatars.discourse-cdn.com/v4/letter/r/ba9def/32.png) [@rtemburn](https://devforum.okta.com/u/rtemburn)\
**Post date:** [November 10, 2020, 6:02am UTC](https://devforum.okta.com/t/enabling-fips-mode-on-okta/11650/3 "2020-11-10T06:02:37Z")

</div>

Okta enabled fips for my org.

After enabling fips, both SP and IDP initiated logins are failing with this error:

10-Nov-2020 05:38:40,727 UTC INFO [Decrypter] (default task-15) |default| algorithm is : [http://www.w3.org/2001/04/xmlenc#aes256-cbc](http://www.w3.org/2001/04/xmlenc#aes256-cbc)  
10-Nov-2020 05:38:40,727 UTC ERROR [SAMLProcessingFilter] (default task-15) |default| Exception -  
java.lang.NullPointerException: null  
at org.opensaml.xml.encryption.Decrypter.decryptDataToDOM(Decrypter.java:531) ~[xmltooling-1.4.4.jar:?]  
at org.opensaml.xml.encryption.Decrypter.decryptDataToList(Decrypter.java:453) ~[xmltooling-1.4.4.jar:?]  
at org.opensaml.xml.encryption.Decrypter.decryptData(Decrypter.java:414) ~[xmltooling-1.4.4.jar:?]  
at org.opensaml.saml2.encryption.Decrypter.decryptData(Decrypter.java:141) ~[opensaml-2.6.4.jar:?]  
at org.opensaml.saml2.encryption.Decrypter.decrypt(Decrypter.java:69) ~[opensaml-2.6.4.jar:?]  
at com.manage.server.sso.saml.websso.WebSSOProfileConsumerImpl.processAuthenticationResponse(WebSSOProfileConsumerImpl.java:237) ~  
at com.manage.server.sso.saml.SAMLAuthenticationProvider.authenticate(SAMLAuthenticationProvider.java:78) ~  
at com.manage.server.sso.saml.SAMLProcessingFilter.doFilter(SAMLProcessingFilter.java:180) ~  
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) ~[log4j-web-2.13.0.jar:2.13.0]  
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) ~[?:?]  
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:132) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) ~[?:?]  
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:68) ~[?:?]  
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) ~[undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:269) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:78) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:133) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:130) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) ~[undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105) ~[?:?]  
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1541) ~[?:?]  
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1541) ~[?:?]  
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1541) ~[?:?]  
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1541) ~[?:?]  
at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:249) [undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:78) [undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:99) [undertow-servlet-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.server.Connectors.executeRootHandler(Connectors.java:370) [undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:830) [undertow-core-2.1.0.Final.jar!/:2.1.0.Final]  
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35) [jboss-threads-2.3.3.Final.jar!/:2.3.3.Final]  
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982) [jboss-threads-2.3.3.Final.jar!/:2.3.3.Final]  
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486) [jboss-threads-2.3.3.Final.jar!/:2.3.3.Final]  
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377) [jboss-threads-2.3.3.Final.jar!/:2.3.3.Final]  
at java.lang.Thread.run(Thread.java:834) [?:?]  
10-Nov-2020 05:38:45,208 UTC INFO [SAMLProtocolMessageXMLSignatureSecurityPolicyRule] (default task-17) || Validation of protocol message signature succeeded, message type: {urn:oasis:names:tc:SAML:2.0:protocol}Response

---

<div class="post-metadata">

**Author:** ![sigama](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/sigama/32/5811_2.png) [@sigama](https://devforum.okta.com/u/sigama)\
**Post date:** [November 11, 2020, 12:23am UTC](https://devforum.okta.com/t/enabling-fips-mode-on-okta/11650/4 "2020-11-11T00:23:16Z")

</div>

Hi @rtemburn! Please open a support ticket through an email to [[support@okta.com](mailto:support@okta.com)](mailto:[support@okta.com](mailto:support@okta.com)) with this issue you are facing. One of our Support Engineers will assist you in narrowing down the root cause of the error.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [September 22, 2021, 3:58pm UTC](https://devforum.okta.com/t/enabling-fips-mode-on-okta/11650/6 "2021-09-22T15:58:36Z")

</div>

Closed on September 22, 2021, 3:58pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.