Getting PowerFAIDS NetPartner to work with Shibboleth 3

[Daudt, Carl]

OK, I now have the following for my relying-part.xml configuration, which is getting me a lot further:
---BEGIN---
        <bean parent="RelyingPartyByName" c:relyingPartyIds="NetPartner">
            <property name="profileConfigurations">
                <list>
                                                <bean parent="SAML2.SSO"
                                                                p:encryptAssertions="false"
                                                />
                </list>
            </property>
        </bean>
---END---

My metadata is unchanged.

I am properly redirected to my CAS login screen (our Shibboleth configuration uses CAS for logins), and then I am redirected back to NetPartner, albeit with an "Invalid Single Sign On Response" message, which I will explain below.

My shibboleth logs end with the following entry:
---BEGIN---
2018-05-11 10:38:59,599 - INFO [Shibboleth-Audit.SSO:241] - 20180511T143859Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|dcdgnhncfmpgmahebjiejlpbekfpgjmadbofekpb|NetPartner|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://myshibbolethserver.myuniversity.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_2062f2d7c57e755b95757862a95dceab|crdaudt|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|netPartnerStudentID|AAdzZWNyZXQxYmLfPXBwREDYO4i78NsYwsnyDjrHRmXo+MXbxn5A2zzz4beCrAbfyrwNsPEbV04NSTKmJ6yIoVBFAizssJI3Dm6QhfxajQGO2ERY+iZ5d9Y=|_dc25b38190cd8aa953c635901fe5ab80|
---END---

My Net Partner logs indicate an ERROR that "SSO Response Digital Signature could not be validated".

In my Net Partner configuration, I have specified that the Public Key Certificate" for my IdP is my idp-encryption.crt file (I have also tried idp-signing.crt - to be honest, I am not sure which to use).  I have also specified that my IdP URL is https://myshibbolethserver.myuniversity.edu/idp/profile/SAML2/Redirect/SSO , my Protocol Binding is POST, and my Requested NameId Format is unspecified (other options include persistent, transient, emailAdress, and various other options).

Any further suggestions?

Carl R. Daudt
Enterprise Applications Systems Analyst, Information Technology
Taylor University
236 W. Reade Avenue
Upland, IN  46989
Office:  765-998-5313
crdaudt at taylor.edu<mailto:crdaudt at taylor.edu>



The information in this communication is intended solely for the individual or entity to whom it is addressed. It may contain confidential or legally privileged information. If you are not the intended recipient, any disclosure, copying, distribution or reliance on the contents of this information is strictly prohibited, and may be unlawful. If you have received this communication in error, please notify us immediately by responding to the sender of this email, and then delete it from your system. Taylor University is not liable for the inaccurate or improper transmission of the information contained in this communication or for any delay in its receipt.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180511/d574ba58/attachment.html>