[Nate Klingenstein]

Yasser,

> opensaml::FatalProfileException at (https://localhost/Shibboleth.sso/SAML2/POST)
> 
> Unable to establish security of incoming assertion.
> 
> Is this a metadata error? I exchanged both metadata!

The error just means that, for some reason, the inbound assertion failed a security check, and it’s not advertising which one.  You’ll have to check the SP’s logs to find out exactly what it is, but it’s usually a mismatch between the public signing key in your IdP’s metadata as loaded by the SP and the private key used by your IdP to actually sign the assertion.

Check to make sure that that’s the error in the SP’s logs, then match ‘em if it is.

Take care,
Nate.