Help with assertion encryption ?

[Brent Putman]

On 5/20/14 12:57 PM, Tom Zeller wrote:
> I know that the SP did not have the correct metadata for the IdP, but
> I was surprised the IdP bailed.

Well, what is actually relevant is the metadata that the IdP has for the
SP to which it's trying to encrypt.  If that SP metadata included a
KeyDescriptor/EncryptionMethod specifying AES GCM, then mystery solved. 
If not, I'm stumped.