<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1433359183220_3052">I ran across this once before but it was a cert mismatch. The logs show this:</div><div id="yui_3_16_0_1_1433359183220_3052"><br></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""><br class="" style=""></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">2015-06-03 12:06:22 DEBUG XMLTooling.TrustEngine.ExplicitKey [19]: attempting to validate signature with the peer's credentials</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">2015-06-03 12:06:22 DEBUG XMLTooling.TrustEngine.ExplicitKey [19]: public key did not validate signature: Digital signature does not validate with the supplied key.</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">2015-06-03 12:06:22 DEBUG XMLTooling.TrustEngine.ExplicitKey [19]: no peer credentials validated the signature</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style="">2015-06-03 12:06:22 ERROR OpenSAML.SecurityPolicyRule.XMLSigning [19]: unable to verify message signature with supplied trust engine</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""><br></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style="">the metadata is this:</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""><br></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""><br class="" style=""></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style="">xmlns:ds="http://www.w3.org/2000/09/xmldsig#"</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style="">entityID="https://saml.aetn.org/simplesaml/saml2/idp/metadata.php"></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:KeyDescriptor use="signing"></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> 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</ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </ds:KeyInfo></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </md:KeyDescriptor></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:KeyDescriptor use="encryption"></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> 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</ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </ds:KeyInfo></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </md:KeyDescriptor></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> Location="https://saml.aetn.org/simplesaml/saml2/idp/SingleLogoutService.php" /></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:NameIDFormat></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> Location="https://saml.aetn.org/simplesaml/saml2/idp/SSOService.php" /></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </md:IDPSSODescriptor></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:ContactPerson contactType="technical"></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:SurName>Administrator</md:SurName></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> <md:EmailAddress>admin@aetn.org</md:EmailAddress></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""> </md:ContactPerson></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""></md:EntityDescriptor></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""><br></div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style="">And the assertion is this:</div><div id="yui_3_16_0_1_1433359183220_3052" dir="ltr" class="" style=""><br></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""><samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">ID="_395fd481c90419a4d1eb362f4830c89b9cecb32ab1" Version="2.0"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">IssueInstant="2015-06-03T19:06:22Z"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">Destination="https://shib.release.lynda.com/Shibboleth.sso/SAML2/POST"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style="">InResponseTo="_8cfc2a4c764649134de365fcc80a7f78"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Issuer></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> https://saml.aetn.org/simplesaml/saml2/idp/metadata.php</saml:Issuer></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:SignedInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Reference URI="#_395fd481c90419a4d1eb362f4830c89b9cecb32ab1"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""><br class="" style=""></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Transforms></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:Transforms></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:DigestValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> lqYDyvlmCN26bTWmRYBHW50bhUQ=</ds:DigestValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:Reference></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:SignedInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:SignatureValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> sKZV44VRE6wmcA0IY/IlC7USU9J1piUSsvt08VUrAtVW3zboDy4fASgjfMD1USmm3qLOtDBRXWx67zONMuGu2mdUAPD1tmEJJWfyR2d9IUXPrPlUoBK7EAiVHLZYBSDHmjNUPHzrJWeydDQ12qDF0sszU3Tv17/hUeaEEh3QTgYxXZvPbRy9oP7hVgpWjSEBrH9gS53+3VNw/LEJr9Aen69G9T8yZ1m/lKMHImfA1pRvnkY1t5VDgVARr4MQobUnyRVIgEXmSri05IUXkNm74bDX2yPkW26BAf0gUm1h6FCYXEeIfp3hE9c/CxVA44hTwo3EEj6H16tZcSmQOF1zFw==</ds:SignatureValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:KeyInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> 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</ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:KeyInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:Signature></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <samlp:Status></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </samlp:Status></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> xmlns:xs="http://www.w3.org/2001/XMLSchema"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> ID="_2366b52c6d3d1330cea3633bb79aa0d18647040867" Version="2.0"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> IssueInstant="2015-06-03T19:06:22Z"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Issuer></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> https://saml.aetn.org/simplesaml/saml2/idp/metadata.php</saml:Issuer></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:SignedInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Reference URI="#_2366b52c6d3d1330cea3633bb79aa0d18647040867"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""><br class="" style=""></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Transforms></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:Transforms></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:DigestValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> 1UOa1hi7XHUUvE0l53XTmjnX5yA=</ds:DigestValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:Reference></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:SignedInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:SignatureValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> ExEMmUsPYSVZ+yBGRo+Iyd+qntC0UJaDy685RkIrfr8hJjR2o0Ty247JfDv4H2/zavD4I+eY0q/pAJJo8mZxWQ7+fKVPm2TlB3F8/17eDo9phHEPwYJ0NucViaeKi46Hom3oMKHQ5DUGYKj4uyXDH7LnhI5VZpQHu1Dz2JFM6NAOSaizsfq7DWj3TAViV+7ZhcMade2WuUt68clLUAW0keSuv9iAxwZV5QjBjdWi4tcezw4hKfc7btZgcyUj3XB3EABSwkpFn7RRFB5itRq8LSB1uVjqlvLRjwQp5RwqlJ+0W6Esih6P5XQBP79AJcw5ynWLpWnwkSbAUxO0b8mlRg==</ds:SignatureValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:KeyInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> MIIFUDCCBDigAwIBAgIQTx/e0KtWbz/DSeOg5ON2rjANBgkqhkiG9w0BAQsFADB6MQswCQYDVQQGEwJVUzELMAkGA1UECBMCVkExEDAOBgNVBAcTB0hlcm5kb24xITAfBgNVBAoTGE5ldHdvcmsgU29sdXRpb25zIEwuTC5DLjEpMCcGA1UEAxMgTmV0d29yayBTb2x1dGlvbnMgRFYgU2VydmVyIENBIDIwHhcNMTUwNTEzMDAwMDAwWhcNMTUwOTI3MjM1OTU5WjBdMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxIDAeBgNVBAsTF25zUHJvdGVjdCBTZWN1cmUgWHByZXNzMRYwFAYDVQQDEw1zYW1sLmFldG4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bafrapylk/+62zL5jG9U2otBM+Rtmw2XWpBfh6dPUEe5+SAma+mqv0iFEachmQVKje/BVAU/oGZucBsyO3yivz/vikORvsB5dmZaNuY07uLvNRZatL8iZaqWDKU+Xdlb884dGx8FJwesvI/Kj7oRPodQfmfWYy3ohBAIGUoPYULtRAktgdv2a9mOtNau+9hkIKrHS0FxFC0IGMS34KLHKA4lOnZWhTP4TMHJqGfo0QOCW/EF2nkQJ6rhsLMk/gK9K7pj993E3S1WGc1OVAb84v/XSyncy02waYgIU4MgukApxD1FsFNR/i5LEoyJzVrQ1vrWlrjAMF5cUQ+GPnMjQIDAQABo4IB7TCCAekwHwYDVR0jBBgwFoAUUc7fVB23LFeraGFIAhrTsoXsQKowHQYDVR0OBBYEFNlM1erl6RBCLysmI0XE/HRnhgqDMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHSAEbjBsMGAGDCsGAQQBhg4BAgEJATBQME4GCCsGAQUFBwIBFkJodHRwOi8vd3d3Lm5ldHdvcmtzb2x1dGlvbnMuY29tL2xlZ2FsL1NTTC1sZWdhbC1yZXBvc2l0b3J5LWNwcy5qc3AwCAYGZ4EMAQIBMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwubmV0c29sc3NsLmNvbS9OZXR3b3JrU29sdXRpb25zRFZTZXJ2ZXJDQTIuY3JsMHsGCCsGAQUFBwEBBG8wbTBEBggrBgEFBQcwAoY4aHR0cDovL2NydC5uZXRzb2xzc2wuY29tL05ldHdvcmtTb2x1dGlvbnNEVlNlcnZlckNBMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLm5ldHNvbHNzbC5jb20wKwYDVR0RBCQwIoINc2FtbC5hZXRuLm9yZ4IRd3d3LnNhbWwuYWV0bi5vcmcwDQYJKoZIhvcNAQELBQADggEBAAt1lN3VnW+5A4Js3jKFE1ebjZAQB/WDEBpHetCy1xW91/QksHUb1oxFu/MpH1Lsye4XR8C2agI3itPbjD7l5Os4XZtdSBhL7g3BSWJw38g4aDp+qOlbireACn1rG2GiN1zDGTL2E7900ZIizfpJfkbcrL4wW9qzg4Jrn8y+QxjZZwAzD/qamqWPVd+pp2Smpdp+SD5Z37KV5W096YTwGja1rn2oHGipC0bGUFHOWZTkU8iyC6ksTlaEVbl7jiGjX2g3Ws8nbFS2Wi6bewbTXcis/jNIL979oT20jkW/nKxKYX8ADHTaVslcJnwHuxEI4bBPw99cd6eJDp5nkwdDQmo=</ds:X509Certificate></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:X509Data></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:KeyInfo></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </ds:Signature></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Subject></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:NameID SPNameQualifier="https://shib.release.lynda.com/shibboleth-sp"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> _e39b02f49a03e51c951c3c08a440a738d1fc486f7a</saml:NameID></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""><br class="" style=""></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:SubjectConfirmationData NotOnOrAfter="2015-06-03T19:11:22Z"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> Recipient="https://shib.release.lynda.com/Shibboleth.sso/SAML2/POST"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> InResponseTo="_8cfc2a4c764649134de365fcc80a7f78" /></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:SubjectConfirmation></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:Subject></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Conditions NotBefore="2015-06-03T19:05:52Z"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> NotOnOrAfter="2015-06-03T19:11:22Z"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AudienceRestriction></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Audience></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> https://shib.release.lynda.com/shibboleth-sp</saml:Audience></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:AudienceRestriction></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:Conditions></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AuthnStatement AuthnInstant="2015-06-03T19:06:06Z"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> SessionNotOnOrAfter="2015-06-04T03:06:22Z"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> SessionIndex="_0b4c60dedabede001cdd0dfee6131ce2eb2e5eb317"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AuthnContext></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AuthnContextClassRef></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:AuthnContext></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:AuthnStatement></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AttributeStatement></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Attribute Name="urn:oid:2.5.4.4"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AttributeValue xsi:type="xs:string"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> Barber</saml:AttributeValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:Attribute></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Attribute Name="urn:oid:0.9.2342.19200300.100.1.3"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AttributeValue xsi:type="xs:string"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> gbarber@aetn.org</saml:AttributeValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:Attribute></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:Attribute Name="urn:oid:2.5.4.42"</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> <saml:AttributeValue xsi:type="xs:string"></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> Greg</saml:AttributeValue></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:Attribute></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:AttributeStatement></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""> </saml:Assertion></div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""></samlp:Response></div><div dir="ltr" class="" style="" id="yui_3_16_0_1_1433359183220_3341"><br class="" style=""></div><div dir="ltr" class="" style="" id="yui_3_16_0_1_1433359183220_3334">So the certs match and the cert is valid (checked it with the SSLShopper tool). What am I missing here?</div><div id="yui_3_16_0_1_1433359183220_3052" class="" style=""><br class="" style=""></div></div></body></html>