SAML encryption

[Ramkumar Ramsubbu]

Hi Shib users,

I am new to SSO implementation. We have a scenario for IDP initiated SSO.
We shared the metadata information with our SP & we updated SP metadata in
our idp.
When generating the SAML response, we see SAML assertions are encrypted
inside the cipher data tags. I have very basic question here.

1. Which key is used by SSO to encrypt the saml assertion in the response.
Is it IDP metadata key or the public key from vendor metadata ?
2. We tried to decrypt with an idp private key using an online tool ,we got
XML parse error.  Is there any way to decrypt the saml assertions we
generate ?

Any pointers/ advice in this will help us. Thanks for help in advance

Thanks,
Ramkumar Ramasubbu
CPS
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201008/21630e7b/attachment.htm>