Initial Setup -- Cannot Get SP and IDP Talking

[Nate Klingenstein]

Sam,

How can I see what key is in the SAML response?

The easy way is to turn the Shibboleth SP's shibd.logger to DEBUG and look at shibd.log when an assertion comes in.  It will log everything in the response.

If the response is not encrypted, then you can also look at it in a browser using a tool like SAML tracer for Firefox or even a generic web console.

What can I check to narrow things down?

The SP's logs will tell you exactly what went wrong.  It's likely the keys, as Paul suggested, if your clocks are on.

Thanks,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131124/b9b5fa49/attachment.html