algorithm URI was invalid: http://www.w3.org/2001/04/xmlenc#aes128-cbc

[Cantor, Scott]

>On 9/26/13 11:33 AM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>
>>
>>Is there a difference in the metadata between the afflicted and working
>>SPs?  Perhaps in the
>><EncryptionMethod> elements?
>
>In the future that will probably matter, but the IdP doesn't use them
>today.

The other obvious issue would be key size, but AES-128 is supported out of
the box with the export policy jars, so that shouldn't be an issue either
(and would also be all or nothing).

-- Scott