hi, are you using the SP product? the cert of the IdP should be in its metadata. if using OpenSAML then add the IDP public key for signing messages to the local java key store alan