Issue with a ServiceProvider authenticating against testshib.org IdP

Kevin Foote kpfoote at uoregon.edu
Mon Oct 5 13:43:20 EDT 2015


> On Oct 5, 2015, at 1:12 PM, Krug, Jeff <Jeff.Krug at gtri.gatech.edu> wrote:
> 
> ​The metadata posted has a single cert marked as a signing cert, so you do not have an encryption cert, so the error message looks correct.  Either update your metadata to include an encryption cert or do something else so that testshib does not try to encrypt assertions sent to you (assuming it has that level of flexibility).


Thanks Jeff, 

More to Jeff’s point .. just remove the  <ns0:KeyDescriptor use="signing”> tags around your cert and re-upload your metadata. 
Please be sure to use the same file name though.. 

Also, just a note I referenced the incorrect URL previously.. 

<https://www.testshib.org/entities.html>


--------
thanks
 kevin.foote


More information about the users mailing list