OpenSAML user discussion

[Dennis Roberts <>]

On Mar 15, 2010, at 8:29 PM, Brent Putman wrote:

> Another suggestion is:  In the real world, for an actual deployment, you
> don't necessarily know in advance how someone sending you encrypted SAML
> structures will place the EncryptedKeys.  So the best thing to do is
> actually supply the Decrypter with a ChainingEncryptedKeyResolver, that
> as members has any or all of the above.  That way you cover all the
> bases.  They will be evaluated in the order they are added to the
> chaining resolver's List.

That worked perfectly.  Thanks again for your help.

Dennis