Assertion Occasionally Signed with Incorrect Cert

[Tom Scavo]

On Fri, Aug 16, 2013 at 1:16 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> You can also manipulate the metadata with the KeyDescriptor use attribute,
> and that can change the process. The instructions I wrote specifically
> were designed to avoid having to do that, but it's not the only way.
>
> But it's a very precise process no matter what approach is used, and
> literally one mistake will break it at some point.

This may help: https://spaces.internet2.edu/x/vgEFAQ

Tom