Veoci Integration

[Klingenstein, Nate]

> From your sentence above, I'm not sure whether you are referring to the 
> your IDP or the SP when you say, "it can't locate an encryption key

The SP's certificate containing a public key for encryption of
assertions with responses out of the IdP to the SP.  I don't even know
if messages to the IdP can be encrypted, but it's plausible.  I would
just turn off request signing if I had access to the SP.


There is a SAML error response dispatched with AuthnFailed in the above
situation, which is why this is particularly weird.  Obviously that
fails because reasons.