> in the SAML Response , there' are 2 EncryptionMethods referenced Ddata encryption and key transport use different algorithms. The blacklisted one is a key transport algorithm. > Any clue as to why it resulted in error.? https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPReleaseNotes#NativeSPReleaseNotes-SecurityAlgorithmChanges -- Scott