OpenSAML user discussion

["Scott Cantor" <>]

> I have completed my saml code which talks to a responder, gets an
assertion
> and validates the signature. Im rejecting the signature(which is coming
from
> a test perl script). Is there some easy way to verify if my code is
working
> right? Any way to feed myself a pre-canned response or something that I
know
> 100% is valid?

Normally you need to determine if the instance that's failing is valid in a
known working implementation and then you'll know if it's your code, theirs,
or the transport. There are exhaustive threads on this in the archive.

-- Scott