SAML encryption

[Mak, Steve]

We tried comparing the signing key in the saml response with the IDP metadata signing key. It matches and also compared with the signing key sent to SP. Both are matching.
Still we get this error.


Just to make sure there's no confusion: Can you verify that your IdP has two files one is a pub cert and one is a private key.  The pub cert should be in the IdP metadata and given to the SP. The IdP uses the private key that is not shared, to generate the signature. The SP uses the pub cert to validate the signature value.

Also, you can run an openssl commands to validate that your pub cert is in fact paired with your private key.

- Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201012/78e748ba/attachment.htm>