login failed for scitation.aip.org in IDP3

[Tom Scavo]

On Sun, Mar 13, 2016 at 10:47 AM, Hong Ye <hy93 at cornell.edu> wrote:
>
> We upgraded to IDP 3 this morning and found authentication from
> scitation.aip.org stopped working.This site uses SAML1 and back channel
> query. After upgrade, it didn’t send back channel attribute query to our IDP
> any more. Does anyone have this site working in IDP 3?

Well, you need to post some log information so we have a clue what's
going on...but I can guess:

You have a single signing certificate in metadata that serves two
functions, that is, a SAML message signing certificate and a
back-channel TLS certificate. I believe IdP V3 is configured for
separate, distinct certificates out-of-the-box, so you need to figure
out how to configure V3 to use the same certificate for both purposes
(to match your metadata).

Tom