Salesforce error when authing against Shibboleth

[Peter Schober]

* Ben Branch <BBranch at uco.edu> [2014-08-07 21:05]:
> Anyone mind taking a peek and see if they can see anything that is
> wrong with this?  What I am including is the complete authentication
> session for 1 user.

You can't really expect to find this error in the IDP's logs, as the
IDP signs with withever it's configured to sign and sends you off,
esp. since you don't even have debugging of protocol messages enabled,
which would show the key used (not that that would help anyone here,
as we lack something to compare it against).

Does this IDP work with other SPs and is signature validation not an
issue there? I'm assuming it is.

Did you try encrypting the response to the vendor instead, just to see
whether that changes anything?

> On a side note, I have opened a ticket with our
> vendor (Remedy Force).   Just a note, if you are using Remedy Force
> and attempt to open a ticket with SalesForce and you do not have
> premier support with Salesforce, they will not assist you in
> troubleshooting your SSO issues (I found this out this morning).

While the vendor's refusal to do its part is certainly unhelpful, from
this doesn't follow that the Shibboleth community is in a position to
diagnose the failed signature validation at that SP.
-peter