Multiple Logic SP's -- assertion decrypting failed

[Cantor, Scott]

On 3/17/16, 10:07 PM, "users on behalf of joller lee" <users-bounces at shibboleth.net on behalf of joller.lee at gmail.com> wrote:

>Do you mean the SP tries to find the key from inside the SAML message but fails?

Yes, it's failing in the step that locates the EncryptedKey, which is generally either inside a KeyInfo element inside the EncryptedData element, or in a special location SAML created that lives next to the EncryptedData element as a sibling.

Normally if there's a problem with the decryption key in the SP, that will show up once it finds the wrapped key and tries to decrypt it. It might do weird things at that point if it doesn't think the key encryption key is the one it has loaded, that's why I was assuming it was a key name problem. But it wouldn't log that error.

I probably can try to reproduce the lookup failure if you attach the message to a bug report. I don't need the key, I'm not trying to decrypt it, just determine whether it will give me the same error. May not be for a little while though.

-- Scott