<div dir="ltr">I tested with and got following error:<div><pre style="color:rgb(0,0,0);word-wrap:break-word;white-space:pre-wrap">2014-06-20 15:42:28 DEBUG XMLTooling.TrustEngine.PKIX [12]: failed to validate certificate chain using supplied PKIX information
2014-06-20 15:42:28 ERROR OpenSAML.SecurityPolicyRule.XMLSigning [12]: unable to verify message signature with supplied trust engine
2014-06-20 15:42:28 WARN Shibboleth.SSO.SAML2 [12]: detected a problem with assertion: Message was signed, but signature could not be verified.</pre><div><br></div><div>Could you please point me what to do next?</div></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Jun 20, 2014 at 11:56 PM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Chinmoy Chakraborty <<a href="mailto:cchinu@gmail.com">cchinu@gmail.com</a>> [2014-06-20 19:59]:<br>
<div class="">> Now how I test the SSO using both Idp and SP? Once I test this, I<br>
> would try to configure my custom application using the same.<br>
<br>
</div>By configuring each part (IDP, SP) according the the documentation:<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration</a><br>
Left column: IDP, middle column: SP.<br>
<br>
At the very least you'll need to configure authentication in the IDP<br>
(which requires JAAS or moving authN to the container) and add SAML<br>
metadata about the IDP to the SP and vice versa.<br>
<br>
Not sure about its status but there's also<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSPLocalTestInstall" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSPLocalTestInstall</a><br>
<span class="HOEnZb"><font color="#888888">-peter<br>
</font></span><div class="HOEnZb"><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>