<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 10/31/12 7:23 PM, Yaowen Tu wrote:<br>
</div>
<blockquote
cite="mid:CAE7YPDJPCBSSWkhKhSh46cuZL0Rj3+ecXi_rA4id9xtatMC3Qw@mail.gmail.com"
type="cite">1. I am not sure how to check if I am passing
EntityDescriptor or SPSSODescriptor. In the code sample of the
wiki:<br>
<br clear="all">
<div class="line number11 index10 alt2"><font size="4"><code
class="java plain"> Credential verificationCredential
= getVerificationCredential(response);</code></font></div>
<div class="line number12 index11 alt1"><font size="4"><code
class="java plain"> SignatureValidator sigValidator =
</code><code class="java keyword">new</code> <code
class="java plain">SignatureValidator(verificationCredential);<br>
<font size="4"> <font size="4"> The SignatureValidator only
<font size="4">need a credential. I think as long as I
get the <font size="4">credential</font> under </font></font></font></code></font><font
size="4"><code class="java plain"><font size="4"><font
size="4"><font size="4">SPSSODescriptor, that should be
fine.<font size="4"><font size="4"><font size="4"> </font></font>Is
that correct? <br>
</font></font></font></font></code></font></div>
</blockquote>
<br>
<br>
I meant what you are passing to the validate(...) method. Although
I forgot that your error is actually on the
SAMLSignatureProfileValidator, so it's whatever you are passing to
the validate(...) method of that.<br>
<br>
You error is odd though, b/c you have a non-null Signature which is
saying it doesn't contain the Apache XMLSignature object. So
something that you are doing is off.<br>
<br>
<br>
</body>
</html>