Is testshib.org sending a different certificate when returning an Assertion to my SP?

[Yaowen Tu]

Hi,

I am testing my SP using testshib.org's IdP. Everything works fine until my
SP tries to verify the signature of the Assertion.

I am using the certificate in the testshib.org IdP metadata file to verify
the signature. Can you help to check if testshib IdP is using that
certificate to create the signature?

>From the SAMLResponse of the testshib.org IdP, it contains a different
certificate in the <Response> tag.

Thanks,
Yaowen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130417/98c69ef0/attachment.html