using cert in SP metadata for encryption

[Peter Schober]

* IAM David Bantz <dabantz at alaska.edu> [2016-11-18 19:08]:
> yes, extended discussion with their technical team, who told me
> they'd "turned on" encryption and re-generated the metadata...

Well, then they should be able to give you a copy of the certificate
you should use for encryption of data to them, either via SAML 2.0
Metadata or out of band. Doesn't really matter at this point.

(That would make the suggestion moot to try using the cert they signed
their metadata with.)

You can always find examples of how to mint/assemble metadata in the
Shib wiki and verify with the tools documented on the
MetadataCorrectness wiki page.

Cheers,
-peter