Troubleshooting

Encrypted assertion cannot be read

The IdP encrypts assertions but the application does not have the decryption key, or the wrong encryption certificate was given to the IdP.

"Encrypted assertion" unreadableEncrypted assertion

Probable cause. The IdP encrypts assertions but the application does not have the decryption key, or the wrong encryption certificate was given to the IdP.

What to do? Give the IdP the application's encryption certificate (use="encryption") and keep the matching private key. ID-Kit does not decrypt yet: disable encryption for the test.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my spaceDecode a SAML response