IdP v3 alpha 3: Message was signed, but signature could not be verified.

[Cantor, Scott]

On 10/31/14, 5:57 PM, "Gary Gwin" <ggwin at cafesoft.com> wrote:
>
>On the SP, not:

Well, I doubt the log will say anything more interesting, but that
definitely isn't a relevant log to care about to debug anything. On DEBUG,
I can usually tell something about where a signature failure is being
detected, because it's easy to tell if it's actually able to verify the
signature itself. Once it falls through the ExplicitKey half of the trust
engines, it will try and verify the signature with the key in the message.
If that step works, there's no question that it's a metadata issue.

>I've tried re-importing the IdP metadata to the SP, so that's not the
>issue.

I would bet a non-zero sum of money the metadata's wrong and that's
exactly what it is.

-- Scott