<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Thank you. That was just what I needed and right on the money. They were serving up two different metadata files, which was tricky to catch.</div><div class=""><br class=""></div><div class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">-Harold</div></div></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Mar 29, 2017, at 9:43 AM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 3/29/17, 10:32 AM, "users on behalf of Harold Daniel" <<a href="mailto:users-bounces@shibboleth.net" class="">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:hdaniel@academicworks.com" class="">hdaniel@academicworks.com</a>> wrote:<br class=""><br class=""><blockquote type="cite" class="">I have verified the certificate in the metadata is the same as what we received in the <ds:X509Certificate> value of the<br class="">assertion. Is there something else I should check for being out of alignment here?<br class=""></blockquote><br class="">You may think you did, but they do not in fact match, the log is entirely clear on that. That's the issue. So whatever metadata you think you're using, you're not. You might have duplicate metadata involved.<br class=""><br class="">Ignore all the PKIX issues, that's simply fallthrough in the case that the key is wrong, it's of no relevance anymore.<br class=""><br class="">-- Scott<br class=""><br class=""><br class="">-- <br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class=""></div></div></blockquote></div><br class=""></body></html>