Shibboleth Developers

["Scott Cantor" <>]

> Failed to validate untrusted credential against trusted key
> 
> when processing the incoming SSO request.....
> 
> My first wild guess would be that tomcat isn't passing the SPs cert
> on to the IdP in the same way that apache is... since the IdP is
> using the same metadata in both cases...

An SSO request doesn't need Apache or Tomcat to pass in the certificate,
it's inside the message (or it's a redirect and it isn't there ever).

-- Scott