signature failing

[Cantor, Scott]

On 1/12/17, 9:06 PM, "users on behalf of Jeff Mccullough" <users-bounces at shibboleth.net on behalf of jeffmc at berkeley.edu> wrote:

> I’m using IDP 3.2.1. There is one SP that reports that the signature the IDP is sending in the SAML response is invalid.

That SP has a bug, to a significantly high probability.

> The cert in the response is correct. I checked the response with the validation tool at
>  and get the error:

A single byte of whitespace changed and it's broken. Unless you know exactly how to pull off and test it, that doesn't mean anything.

> What else should I examine or change in my configuration?

Nothing. You aren't the problem.

-- Scott