Veoci Integration

[Cantor, Scott]

On 2/8/17, 2:51 PM, "users on behalf of Klingenstein, Nate" <users-bounces at shibboleth.net on behalf of nklingenstein at calstate.edu> wrote:

>    Here is a complete log that I hope you will be able to make sense of.

Try not using DEBUG unless you don't get an explicit WARN or ERROR.
 
> The money quote is included on DEBUG.

No, it's here, first thing that would have been in the log if it were configured as delivered:

2017-02-08 11:46:32,829 - WARN [org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:248] - Validation failure: Failed to resolve both a data and a key encryption credential

That's what you originally said, it can't resolve the key. I assume you left encryption on, and (I'm guessing) also didn't set the idp.encryption.optional property.

The normal inference is that the metadata doesn't contain a key since there's nothing else in the log pointing to a failure to do something with a key that was there.

-- Scott