shibbolth 2.5 SP and wso2 IDP

[Cantor, Scott]

On 3/19/15, 2:52 AM, "bpraveen" <bkpraveen at hotmail.com> wrote:



>I get the following error.

You have multiple errors.

>2015-03-18 20:56:37 WARN OpenSAML.MessageDecoder.SAML2 [60]: no metadata
>found, can't establish identity of issuer (localhost)

"localhost" is not a proper entityID. The IdP is not properly naming 
itself, and you don't have metadata loaded for whatever that name is or 
will be.

>2015-03-18 20:56:37 WARN XMLTooling.Decrypter [60]: XMLSecurity exception
>while decrypting key: XSECAlgorithmMapper::mapURIToHandler - URI
>http://www.w3.org/2001/04/xmlenc#rsa-1_5 disallowed by whitelist/blacklist
>policy

Well, that XML Encryption key transport algorithm is not secure anymore 
and we don't allow it by default.

-- Scott