<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(77, 44, 220); background-color: rgb(254, 244, 156);">With this addition to relying-party.xml </div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(77, 44, 220); background-color: rgb(254, 244, 156);"><br></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(77, 44, 220); background-color: rgb(254, 244, 156);"><!-- Disable encryption for Fuzebox per vendor request --></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><RelyingParty <span style="color: #27b41c">id</span><span style="color: #000000">=</span><span style="color: #bc321c">"www.</span><span style="color: #991200; background-color: #e6e600">fuzebox</span><span style="color: #bc321c">.com"</span></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(188, 50, 28); background-color: rgb(254, 244, 156);"><span style="color: #25b2bf"> </span><span style="color: #27b41c">provider</span><span style="color: #000000">=</span>"urn:mace:incommon:alaska.edu"</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(39, 180, 28); background-color: rgb(254, 244, 156);"><span style="color: #25b2bf"> </span>defaultSigningCredentialRef<span style="color: #000000">=</span><span style="color: #bc321c">"IdPCredential"</span><span style="color: #25b2bf">></span></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(39, 180, 28); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span><span style="color: #25b2bf"><ProfileConfiguration </span>xsi<span style="color: #4d2cdc">:</span>type<span style="color: #000000">=</span><span style="color: #bc321c">"saml:SAML2SSOProfile"</span><span style="color: #25b2bf"> </span>encryptAssertions<span style="color: #000000">=</span><span style="color: #bc321c">"never"</span><span style="color: #25b2bf"> </span>encryptNameIds<span style="color: #000000">=</span><span style="color: #bc321c">"never"</span><span style="color: #25b2bf"> /></span></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(37, 178, 191); background-color: rgb(254, 244, 156);"><span style="color: #000000"> </span></RelyingParty></div><div><br></div><div>the IdP indicates following error while working with the NameId:</div><div>...</div><div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.949 - DEBUG [org.opensaml.security.MetadataCredentialResolver:315] - Retrieving metadata for entity '<a href="http://www.fuzemeeting.com">www.fuzemeeting.com</a>' in role '{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor' for protocol 'urn:oasis:names:tc:SAML:2.0:protocol'</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.950 - DEBUG [org.opensaml.security.MetadataCredentialResolver:348] - Added new credential collection to cache with key: [<a href="http://www.fuzemeeting.com">www.fuzemeeting.com</a>,{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor,urn:oasis:names:tc:SAML:2.0:protocol,ENCRYPTION]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.950 - DEBUG [org.opensaml.xml.security.credential.criteria.EvaluableCredentialCriteriaRegistry:74] - Registry located evaluable criteria class org.opensaml.xml.security.credential.criteria.EvaluableUsageCredentialCriteria for criteria class org.opensaml.xml.security.criteria.UsageCriteria</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.950 - DEBUG [org.opensaml.xml.security.credential.criteria.EvaluableCredentialCriteriaRegistry:105] - Registry could not locate evaluable criteria for criteria class org.opensaml.security.MetadataCriteria</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.950 - DEBUG [org.opensaml.xml.security.credential.criteria.EvaluableCredentialCriteriaRegistry:74] - Registry located evaluable criteria class org.opensaml.xml.security.credential.criteria.EvaluableEntityIDCredentialCriteria for criteria class org.opensaml.xml.security.criteria.EntityIDCriteria</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.950 - DEBUG [org.opensaml.xml.security.credential.criteria.EvaluableCredentialCriteriaRegistry:74] - Registry located evaluable criteria class org.opensaml.xml.security.credential.criteria.EvaluableKeyAlgorithmCredentialCriteria for criteria class org.opensaml.xml.security.criteria.KeyAlgorithmCriteria</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.951 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:923] - Could not resolve a key encryption credential for peer entity: <a href="http://www.fuzemeeting.com">www.fuzemeeting.com</a></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">18:17:02.951 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:734] - Unable to construct encrypter</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);">org.opensaml.xml.security.SecurityException: Could not resolve key encryption credential</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.getEncrypter(AbstractSAML2ProfileHandler.java:924) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildSubject(AbstractSAML2ProfileHandler.java:731) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildResponse(AbstractSAML2ProfileHandler.java:266) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.completeAuthenticationRequest(SSOProfileHandler.java:308) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:171) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84) [shibboleth-common-1.3.7.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) [servlet-api.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:81) [shibboleth-identityprovider-2.3.8.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.3.7.jar:na]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:554) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) [catalina.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859) [tomcat-coyote.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588) [tomcat-coyote.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) [tomcat-coyote.jar:6.0.32]</div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"><span class="Apple-tab-span" style="white-space:pre"> </span>at java.lang.Thread.run(Thread.java:662) [na:1.6.0_45]</div></div><div><br></div><div>The resulting SAML assertion contains:</div><div><br></div><div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> <saml2p:Status></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"/></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> <saml2p:StatusMessage>Unable to encrypt NameID</saml2p:StatusMessage></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> </saml2p:Status></div></div><div><br></div></body></html>