Decoding encrypted attributes from an IDP

[Cantor, Scott]

> then use that to decrypt the assertion itself?  When I look at the logs, it
> appears that things fall apart when it tries to process "message against SAML
> 2.0 SSO profile":

I gave you the solution to this yesterday. If your key matches your metadata, then the problem is the key names they generated and you will have to add extractKeyNames="false" to the credential resolver to stop it from checking the name against your key.

> 2012-07-24 12:45:57 DEBUG XMLTooling.CredentialCriteria [21]: credential
> name(s) didn't overlap
> 2012-07-24 12:45:57 ERROR Shibboleth.SSO.SAML2 [21]: Unable to resolve
> any key decryption keys.

Let me ask again: did you check the log and not find any mention of these same errors from the original EncryptedAttribute case?

-- Scott