Shib 3.2.1

[Peter Schober]

* Cheltenham, Chris <ccheltenham-ext at philasd.org> [2018-06-18 15:01]:
> I am releasing assertions to our vendor's SP however they get an error
> saying.
> 
> "Details: Signature used for attempting SSO is invalid."

That's not an error message from the Shibboleth software, AFAIK, and
it's also not a particularly helpful one at that.
So for details about what exactly this means you'd have to ask the
vendor.

If that means they think the signature on the SAML you sent them is
"invalid" you probably gave them the wrong certificate for verifying
those signatures.
If you gave them SAML 2.0 Metadata (and not a certificate separately)
maybe they extracted the wrong cert from the metadata.

-peter