"SAML response signature is not valid. "

[IAM David Bantz]

An SP we've had integrated and working for years (OrigamiRisk) is now
rejecting assertions from my IdP with the message "SAML response signature
is not valid."

Their error logs contain a seemingly complete copy of my IdP's signed
response immediately after that message.

The logged outgoing SAML from my IdP asserts success and includes requested
attributes. The outgoing assertion is not encrypted. None of my other SPs
appear to be affected.

I want to say it must be the SP's problem, but if you can think of
something further for me to look at in my IdP, I will appreciate it!
Thanks,

David Bantz
UA OIT IAM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170228/c8b2876a/attachment.html>