<div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
> So your change was the deletion of the 'use="signing"' part in the md:KeyDescriptor tag? I made this change as well, reloaded the metadata and now the error (returned by them) has changed to:<br>
><br>
<br>
</div>Yes. </blockquote><br>So forgive me, but what does removing this parameter from the metadata actually do? the IdP won't sign the assertion because Box can't handle that? but the IdP will/should still encrypt the assertion and Box is supposed to support that? Though from what you were saying, you can't remember if thats something optionally they must enable? I've got an email out to my Box contacts, depending on what their response is, I may loop up with you for that information.<br>
<br>Thanks<br>-Rob<br><br clear="all"></div><br>-- <br><div>Robert W. Gorrell<br>Middleware Engineer, Identity and Access Management</div>
<div>University of NC at Greensboro<br>336-334-5954</div>