Message was signed, but signature could not be verified

[Cantor, Scott]

> I have configured SP in our environment and it is working fine. Last week I
> have received a mail from one of our Federation  that they have changed
> their "Metadata signing certificate" and "SAML IdPs signing/encryption
> certificate". They have provided us both this certificate. I have configured it
> in our environment but it was throwing error like "Message was signed, but
> signature could not be verified."

Then you didn't configure it. I don't know what you did, but in Shibboleth it requires updating the IdP's metadata with the certificate(s).

-- Scott