<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 10, 2015 at 9:57 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">On 3/10/15, 9:32 AM, "Marc Boorshtein" <<a href="mailto:mboorshtein@gmail.com">mboorshtein@gmail.com</a>> wrote:<br>
><br>
>I'm getting the idp up and running for some testing and am running into an issue. The idp is running on CentOS 6.6 and tomcat 7 with openjdk and an apache 2.2 instance in front of it.<br>
<br>
</span>For the record, tomcat 7 is not supported.<br></blockquote><div><br></div><div>Noted</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<span class=""><br>
>Instead of being prompted to login I get the following error:<br>
>WARN [org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:221] - Validation failure: Failed to resolve both a data and a key encryption credential<br>
>I'm guessing this is because the idp expects the authnrequest to be signed and/or encrypted?<br>
<br>
</span>No. I'm not even that familiar with the errors that happen yet, but my guess would be you have encryption enabled (the default), not optional (the default), and the SP metadata contains no key.<br>
<span class=""><font color="#888888"><br></font></span></blockquote><div><br></div><div>OK, that makes sense. I set <span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">idp.encryption.optional to true and was able to get past this error.</span></div><div><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px"><br></span></div><div><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">Thanks</span></div><div><br></div></div></div></div>