<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 7/2/2020 6:10 AM, Pavan Kishore
Vuppada wrote:<br>
</div>
<blockquote type="cite"
cite="mid:5efdc0be.1c69fb81.7ba00.41be@mx.google.com">
<p class="MsoNormal">I have configured Siteminder as IDP &
Shibboleth as SP. </p>
<p class="MsoNormal">I am trying to sign and encrypt the
assertion. On the shibboleth side, it is not able to verify the
signature. But if we individually either sign or encrypt
assertion, it is working fine without any problems.</p>
<p class="MsoNormal">The error in the logs are very generic (Error
- error processing incoming assertion: Message was signed, but
signature could not be verified).</p>
<p class="MsoNormal">Is there a way to know what exactly has
caused the failure? I have enabled DEBUG logging, but there is
not much info. there. Can we check the part of XML / signature
which is causing the problem ?<o:p> <br>
</o:p></p>
</blockquote>
<p>Based on the log messages, it looks like it is successfully
validating the SAML Response, successfully extracting and
decrypting the Authentication Assertion, but failing to validate
the Authentication Assertion.<br>
</p>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>