Brent, really appreciate your help. Now I know what went wrong. I will take a look at the SignatureValidationFilter.<br><br>For the key, I think I understand it, but I may need some clarification. My opinion is metadata is used to provide some information to consumer including SAML keys. How we can trust the metadata is to verify the signature. We need to use some key to verify the signature. Then the question result into: how do we trust the key used for signature. As you said, we can use PKIX to verify the certificate and the key, or we can find some secure channel to distribute the key. As soon as we trust the key used for signature, we are done. It really doesn't matter what key we would use for SAML operations. We implicitly trust the SAML key because we already verified signature and trusted metadata, so we trust everything in the metadata including SAML key. So my point is that there is no technical reason why we cannot use the same key for signature and SAML operations. My I correct?<br>
<br>Thanks,<br clear="all">Yaowen<br>
<br><br><div class="gmail_quote">On Thu, Nov 1, 2012 at 12:51 PM, Brent Putman <span dir="ltr"><<a href="mailto:putmanb@georgetown.edu" target="_blank">putmanb@georgetown.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
SignatureValidationFilter</blockquote></div><br>