Help ? Non-federation, custom meta-data ?

[Cantor, Scott]

>  At the bottom is the actual meta-data they sent me.
> Note that there seems be something related to signatures
> after the <ns0:EntitiesDescriptor....>

Well, there's a key in it, but after having gone through this so many times, I'm going to leave it at:

- the signature they created is broken or the metadata is wrong, probably the latter

>  I actually removed this
> as it wasn't actually within the <nso:EntityDescriptor..> ??
> (I also removed all of the ns1: and ns0: tags ..)

Then I would guess you broke it in some way when you did that. The signature on the document shouldn't matter or need to be removed.

> but again, what seems weird to me is that with the logs there are messages
> such as:
> 
>          Forcing on-demand metadata provider refresh if necessary

Doesn't mean what you think and has nothing to do with the error. Other than that it's falling through the standard trust check into the PKIX case that won't work here and isn't needed.

-- Scott