Error on signing outbound SAML message

[Cantor, Scott]

On 1/6/16, 10:56 AM, "users on behalf of Bogdan Albei" <users-bounces at shibboleth.net on behalf of bogdan.albei at callsign.com> wrote:



>This is the response sent to the SP:

No, that's the unencrypted version.

>And this is the metadata:
><EntitiesDescriptor Name="urn:mace:shibboleth:callsign"

You have no right to use that URN. Just FYI.

I think the algorithm extensions and EncryptionMethod elements in the metadata might be triggering a non-default algorithm that's causing a problem, but I can check that. Removing all that from the metadata and testing it might be useful.

-- Scott