<div dir="ltr"><div><div><div>Thank you all for your help. As a test, I disabled the encryption requirement for this SP and I stopped seeing this error. I'm still not able to login to ServiceNow but I think it has more to do with an incomplete setup on the ServiceNow side by our consultant. FWIW, the most recent release of ServiceNow apparently does support encryption:<br><h2> <span class="" id="Fuji">9.1 Fuji </span></h2>
<ul><li>Supports encrypted SAML assertions when Multi-Provider Single Sign-on is enabled. See <a href="http://wiki.servicenow.com/index.php?title=SAML_2.0_Setup#Configuring_Users_for_Multi-Provider_Single_Sign-On" title="SAML 2.0 Setup">Configuring Users for Multi-Provider Single Sign-On</a> for descriptions of the settings you need to configure.
</li></ul>So I will continue to research this from the SP side.<br><br></div>One quick question, if I may: I'm obviously still fairly new to Shibboleth... a previous comment above indicated that I have a lot of unnecessary signing going on. Are there any published best-practices and security recommendations on these types of things? If I recall correctly, I set that up based on an Internet2 training document that I found but perhaps I'm wrong?<br><br></div><div>Thank you all for the help so far!<br><br></div><div>Best,<br></div><div>Teddy<br></div><font size="1"><span style="font-family:monospace,monospace"></span></font><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Mar 11, 2015 at 5:29 PM, Eric Goodman <span dir="ltr"><<a href="mailto:Eric.Goodman@ucop.edu" target="_blank">Eric.Goodman@ucop.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> FWIW, I don't believe Service-Now supported encryption when we<br>
> configured it, but I don't know if that's still true.<br>
<br>
</span>My recollection is in agreement with this statement.<br>
<span class="HOEnZb"><font color="#888888"><br>
--- Eric<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><b>Tadeusz Sacilowski</b><div><i>Manager, Portal & Mobile Development</i></div><div>Teachers College, Columbia University</div><div><a href="mailto:sacilowski@tc.columbia.edu" target="_blank">sacilowski@tc.columbia.edu</a></div></div></div>
</div>