TestShib.org - Testing my SP - Unable to encrypt assertion

[Brent Putman]

On 3/12/15 3:35 PM, Dip Sarkar wrote:

>
> I see this error in the IdPError log:
> 14:41:26.437 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:927] - Could not resolve a key encryption credential for peer entity: dipsilonsolutions.dyndns-office.com/Demo3

Two things:

1) Syntactically that's not really a valid entityID.  Per SAML spec it
needs to be an absolute URI, with a scheme etc.   The IdP won't care,
treats it as a string, but just pointing it out.

2) In the attached metadata you have an entity with
entityID="dipsilonsolutions.dyndns-office.com/Demo4" .  That's not the
same as above.  /Demo3 vs /Demo4.  So that's the source of the problem,
if that's really the metadata you loaded, since the SP is acting as the
../Demo3 one.