idp users having authentication issues on some devices

[wknight]

*Background*
I'm the developer who maintains a single SP that acts as the end point for
various IDPs.  Just recently we updated our server to disable a few specific
ciphers: SSLv3 and RC4

*Problem*
This change seems to have affected a subset of users from a single idp.  We
have reports of people being able to login through SAML with a smartboard
but not their computer, for instance.  

*Data*
The shibd.log ERROR shows up as: 
"2019-03-01 17:27:14 ERROR Shibboleth.SSO.SAML2 [22] [default]: failed to
decrypt assertion: XMLSecurity exception while decrypting:
OpenSSL:SymmetricKey::decryptFinish - Out of range padding value in final
block"

*Call For Help*
I'm reaching to this forum because I'm not sure what else to do.  It seems
like modifying settings on either the SP or problematic IDP may not be
necessary, since "most login attempts" seem to be successful.  Any info on
this issue would be very helpful.

Thanks in advanced





--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html