Error occured attempting authentication

[Peter Schober]

* msumption <msumption at shastacollege.edu> [2014-06-09 22:24]:
> BTW, why would the global catalog work, and not my prior config
> (sorry, I'm not an LDAP expert yet)?

You'd have to ask that someone who knows Microsoft Active Directory.
If referrals were the problem (which still is possible; when
connecting to that port no referrals will be sent) I wonder why the
java property didn't take care of that. But, see above. :)

> opensaml::FatalProfileException at
> (https://sp.testshib.org/Shibboleth.sso/SAML2/POST)
> Message was signed, but signature could not be verified.

Continuing our "teach a man how to fish" session, start at the
documentation homepage at
https://wiki.shibboleth.net/confluence/display/SHIB2
Then follow "Troubleshoot" in the left column, then "Common Errors" in
the middle ("Native Service Provider (SP)" column), second entry in
that list.

The IDP didn't sign with a key your SP knows from SAML metadata.
So either the metadata is wrong, or the IDP configuration.
-peter