Salesforce error when authing against Shibboleth

[Ben Branch]

All,

I've spent most of my day today trying to configure Salesforce to use Shibboleth and I've ran into nothing but problems.

Currently, when I use the SAML Validator I get this failure on Item #11:

11. Validating the Signature

  Is the response signed? false

  Is the assertion signed? true

  The reference in the assertion signature is valid

  Is the correct certificate supplied in the keyinfo? true

  Signature or certificate problems

  The signature in the assertion is not valid


I've double checked the certificate that I've uploaded and it matches what I have in my metadata file, and both of those match the .crt file I have on my server.  I've double checked the SP Metadata, and it is correct.  When I login I get this error:

Login Error
Your login attempt using single sign-on with an identity provider certificate has failed. Please contact your salesforce.com administrator for more information.

Everything else in the SAML Validator checks out fine.  I am at a complete loss as to where I need to start looking on how to resolve this issue.  Any help would be greatly appreciated.


Ben Branch
UNIX/Linux Administrator
University of Central Oklahoma
ITIL Foundation v3, Network+, RHCSA

100 N. University Drive, Box 122
Edmond, OK 73034
D: 405.974.2649 | M: 405.550.6804 | bbranch at uco.<mailto:bbranch at uco.>edu | www.uco.edu<http://www.uco.edu/>

"I am wiser than this man, for neither of us appears to know anything great and good; but he fancies he knows something, although he knows nothing; whereas I, as I do not know anything, so I do not fancy I do. In this trifling particular, then, I appear to be wiser than he, because I do not fancy I know what I do not know."  - Socrates

**Bronze+Blue=Green** The University of Central Oklahoma is Bronze, Blue, and Green! Please print this e-mail only if absolutely necessary!

**CONFIDENTIALITY** -This e-mail (including any attachments) may contain confidential, proprietary and privileged information. Any unauthorized disclosure or use of this information is prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140806/66429aa4/attachment.html