detected a problem with assertion: Unable to establish security of incoming assertion.

[Cantor, Scott]

> Thanks for the information, do you know what I should be
> looking for in the metadata?

Most likely it's the wrong public key in the metadata compared to whatever the IdP is actually signing with, but you don't have to guess. Look at the log.

In the extremely unlikely case that there's nothing else but a complaint about HTTP method in there, then the AssertionConsumerService element in the metadata could have the wrong binding constant, perhaps specifying HTTP-Redirect instead of HTTP-POST.

-- Scott