Unable to encrypt assertion - saml tracer

[Peter Schober]

* Vignesh, Vanna G. <vignesh at musc.edu> [2014-01-16 21:35]:
> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder" />
> <saml2p:StatusMessage>Unable to encrypt assertion</saml2p:StatusMessage>

If the IDP returns an error to the SP it will also write something to
idp-process.log. And no, none of the IDP's default settings need
changing for the IDP to be able to encrypt data.
-peter