SP logout produces IdP error

[Robert Rust]

I’m trying to resolve a logout error that a new SP I’m setting up is producing.  It’s the same that’s documented in the thread from this list posted back in March at the following link, but I’m seeking clarification on what the appropriate resolution is:
http://shibboleth.1660669.n2.nabble.com/IDP-3-Logout-error-td7632335.html

Scott indicated that “IdP does not have the private half of the key pair the SP used to encrypt part of the message” so the IdP’s metadata is wrong … and José indicated that the public portion of the key in the IdP’s metadata is wrong.  My first interpretation of this is that there’s data my IdP should be providing to the SP via its metadata that is missing or wrong. What I’m confused by is the fact that we have a dozen other SPs that seem to log out just fine and from what I can tell, should be using the exact same metadata.
Could someone provide clarification on whether this is a problem that I should correct on my IdP (at risk of breaking existing setups) or if I should continue to focus on the SP side?

-Robert
--
~~~~~~~~~~~~~~~~~~~~~~~~~
Robert J. Rust
Systems Administrator
Division of Technology Services
Univ. of Wisc. - River Falls
~~~~~~~~~~~~~~~~~~~~~~~~~
[https://www2.uwrf.edu/static/images/email-wordmark.png]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170919/333cb04a/attachment-0001.html>