On 5/13/13 1:40 PM, "Mitu Singh" <mitusingh27 at yahoo.com> wrote: > >messageContext.setInboundMessageTransport(new >HttpServletRequestAdapter(request)); >SAMLMessageDecoder decoder = new HTTPPostSimpleSignDecoder(); If you're using SimpleSign, which I doubt, it's not an XML Signature at all. If it's not, you want the standard POST decoder. -- Scott