javax.crypto.AEADBadTagException: Tag mismatch!

[Peter Schober]

* El Manaa Amine via users <users at shibboleth.net> [2023-08-10 16:43]:
> The public key+ certificate, the ones used by Jetty and the ones
> used by Shibboleth are not the same. However, the CN is the
> same. This shouldn't pause problems , right?

The certificate structures of keys used for signing and encrypting
SAML protocol messages do not matter, correct.
Also, those are not used for HTTPS.

Whatever keys Jetty uses for HTTP also seems irrelevant as those are
neither seen by end users not are they used for SAML -- they are an
implementantion detail of your deployment to secure the connection
between the system terminating end-users' TLS connections ("Azure
application gateway") and your Java Servlet container (Jetty) running
the IDP software.
(AFAIU from your description of your deployment.)

-peter