Could not resolve a key encryption credential

Cantor, Scott cantor.2 at
Fri Nov 28 15:15:44 EST 2014

On 11/28/14, 5:11 PM, "Trevor Cooley" <trevor.s.cooley at> wrote:
>The SP metadata that I uploaded contains the correct certificate in the 
>KeyDescriptor element (I have tried use="signing" and use="encryption" 
>to no avail) and I am at a loss to understand why the IDP cannot encrypt 
>the assertion.

Because you haven't done that, you just think you have. Marking it 
use="signing" will certainly not work, but not doing that will, so it 
isn't using the metadata you think it is.

-- Scott

More information about the users mailing list