Hello all,<div><br></div><div>My localhost tomcat log file is erroring out at the beginning of this section I added to relying-party.xml (added section indicated by my comment):</div><div><br></div><div><div>    &lt;!-- ========================================== --&gt;</div>
<div>    &lt;!--     Security Configurations                --&gt;</div><div>    &lt;!-- ========================================== --&gt;</div><div>    &lt;security:Credential id=&quot;IdPCredential&quot; xsi:type=&quot;security:X509Filesystem&quot;&gt;</div>
<div>        &lt;security:PrivateKey&gt;/opt/shibboleth-idp/credentials/idp.key&lt;/security:PrivateKey&gt;</div><div>        &lt;security:Certificate&gt;/opt/shibboleth-idp/credentials/idp.crt&lt;/security:Certificate&gt;</div>
<div>    &lt;/security:Credential&gt;</div><div><br></div><div>&lt;!-- Added trust engine and security policy for Liberty SSOS configuration. -kgb, 17-Apr-2012  --&gt;</div><div><br></div><div>            &lt;security:TrustEngine id=&quot;shibboleth.ext.delegation.IdPAssertionTrustEngine&quot; xsi:type=&quot;security:StaticExplicitKeySignature&quot;&gt;</div>
<div>                &lt;security:Credential id=&quot;IdPValidationOnlyCredential&quot; xsi:type=&quot;security:X509Filesystem&quot;&gt;</div><div>                    &lt;security:Certificate&gt;/opt/shibboleth-idp/credentials/idp.crt&lt;/security:Certificate&gt;</div>
<div>                &lt;/security:Credential&gt;</div><div>            &lt;/security:TrustEngine&gt;</div><div><br></div><div> &lt;security:SecurityPolicy id=&quot;shibboleth.ext.delegation.LibertySSOSPolicy&quot; xsi:type=&quot;security:SecurityPolicyType&quot;&gt;</div>
<div>            &lt;security:Rule xsi:type=&quot;samlsec:Replay&quot;/&gt;</div><div>            &lt;security:Rule xsi:type=&quot;samlsec:IssueInstant&quot;/&gt;</div><div>            &lt;security:Rule xsi:type=&quot;samlsec:SAML2AuthnRequestsSigned&quot;/&gt;</div>
<div>            &lt;security:Rule xsi:type=&quot;samlsec:ProtocolWithXMLSignature&quot; trustEngineRef=&quot;shibboleth.SignatureTrustEngine&quot; /&gt;</div><div>            &lt;security:Rule xsi:type=&quot;samldel:ClientCertAuth&quot; trustEngineRef=&quot;shibboleth.CredentialTrustEngine&quot; /&gt;</div>
<div>            &lt;security:Rule xsi:type=&quot;samldel:WSSSAML20AssertionTokenRule&quot; trustEngineRef=&quot;shibboleth.ext.delegation.IdPAssertionTrustEngine&quot; /&gt;</div><div>            &lt;security:Rule xsi:type=&quot;samlsec:MandatoryIssuer&quot;/&gt;</div>
<div>        &lt;/security:SecurityPolicy&gt;</div><div><br></div><div>The log has this explanation:</div><div><br></div><div><div>Caused by: org.xml.sax.SAXParseException: cvc-complex-type.2.4.a: </div><div>Invalid content was found starting with element &#39;security:TrustEngine&#39;. </div>
<div>One of &#39;{&quot;urn:mace:shibboleth:2.0:security&quot;:SecurityPolicy}&#39; is expected.</div></div><div><br></div><div>Should the SecurityPolicy be nested under the TrustEngine element? Or does the SecurityPolicy have to come first? Or none of the above?</div>
<div><br></div><div>Thank you for your help. I&#39;ve been searching the interwebs, but no luck so far. I tried to make these entries look like others in the file, but I don&#39;t know what the required and optional components of these elements are, so I&#39;m kind of going blind. </div>
<div><br></div><div>regards,</div><div>Karla B</div><div><br></div>-- <br><div style="margin-left:40px">Karla Borecky<br>Systems Administrator<br>ITS<br>Smith College<br>Northampton, MA 01063<br></div><br>
</div>