<div dir="ltr">I haven't seen this error previously. This is early processing of incoming request; it seems to say checking a signed request failed, but refers to "Credential" failed, providing a CN that makes no sense either Cherwell or to me (<span class="gmail-m_3512440572456965634gmail-s1" style="color:rgb(0,0,0);font-family:Menlo;font-size:11px;font-variant-ligatures:no-common-ligatures">subjectName='CN=ualaska.cher</span><a href="http://wellondemand.com/" target="_blank" style="font-family:Menlo;font-size:11px;font-variant-ligatures:no-common-ligatures">wellondemand.com</a><span style="color:rgb(0,0,0);font-family:Menlo;font-size:11px;font-variant-ligatures:no-common-ligatures">,OU=Domain Control Validated')</span><div><font color="#000000" face="Menlo"><span style="font-size:11px;font-variant-ligatures:no-common-ligatures">Is that the CN from a certificate? Not a certificate in the SP metadata!</span></font></div><div><font color="#000000" face="Menlo"><span style="font-size:11px;font-variant-ligatures:no-common-ligatures"><br>Pointers appreciated.</span></font></div><div><font color="#000000" face="Menlo"><span style="font-size:11px;font-variant-ligatures:no-common-ligatures"><br></span></font></div><div><font color="#000000" face="Menlo"><span style="font-size:11px;font-variant-ligatures:no-common-ligatures">David Bantz</span></font></div><div><font color="#000000" face="Menlo"><span style="font-size:11px;font-variant-ligatures:no-common-ligatures">U Alaska<br></span></font><div><br></div><div><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures">21:13:01:722<span class="gmail-m_3512440572456965634gmail-Apple-converted-space">  </span></span><span class="gmail-m_3512440572456965634gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(255,255,255);background-color:rgb(0,0,0)">ERROR</span><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures"> [137.229.6.120] org.opensaml.security.x509.impl.BasicX509CredentialNameEvaluator:300 ><span class="gmail-m_3512440572456965634gmail-Apple-converted-space">  </span>Credential failed name check: [subjectName='CN=ualaska.cher</span><a href="http://wellondemand.com/" target="_blank" style="font-variant-ligatures:no-common-ligatures">wellondemand.com</a><span style="font-variant-ligatures:no-common-ligatures">,OU=Domain Control Validated']</span></p><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures">21:13:01:729<span class="gmail-m_3512440572456965634gmail-Apple-converted-space">  </span>WARN [137.229.6.120] net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:202 ><span class="gmail-m_3512440572456965634gmail-Apple-converted-space">  </span>Profile Action WebFlowMessageHandlerAdaptor: Exception handling<span class="gmail-m_3512440572456965634gmail-Apple-converted-space"> </span></span><span style="font-variant-ligatures:no-common-ligatures">message</span></p><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures">org.opensaml.messaging.handler.MessageHandlerException: Validation of protocol message signature failed</span></p><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-m_3512440572456965634gmail-Apple-converted-space">        </span>at org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler.doEvaluate(SAMLProtocolMessageXMLSignatureSecurityHandler.java</span><span style="font-variant-ligatures:no-common-ligatures">:145)</span></p><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures">21:13:01:730<span class="gmail-m_3512440572456965634gmail-Apple-converted-space">  </span>WARN [137.229.6.120] org.opensaml.profile.action.impl.LogEvent:105 ><span class="gmail-m_3512440572456965634gmail-Apple-converted-space">  </span>A non-proceed event occurred while processing the request: MessageAuthenticationErr</span></p><p class="gmail-m_3512440572456965634gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;margin:0px;color:rgb(0,0,0)"><span class="gmail-m_3512440572456965634gmail-s1" style="font-variant-ligatures:no-common-ligatures">or</span></p></div></div></div>