title: "Signature did not validate against the credential's key" with Junos as IdP
body: <p>I've implemented SSO using Spring SAML and everything is working fine for an interaction with idp.ssocircle.com.</p>
  
  <p>Now I am trying to use another identity provider. I have downloaded the metadata of the IdP and have linked it in my spring XML config. I have also uploaded the metadata of the service provider to the iDP and have linked it in the spring XML config.</p>
  
  <p>I am redirected to the login page of my IdP and can successful enter my credentials. But an error like that appears "Signature did not validate against the credential's key".</p>
  
  <p>There is another stackoverflow post which describes a similiar problem, see <a href="https://stackoverflow.com/questions/23059203/http-status-401-authentication-failed-incoming-saml-message-is-invalid-with">&quot;HTTP Status 401 - Authentication Failed: Incoming SAML message is invalid&quot; with Salesforce as IdP for implementating SSO</a></p>
  
  <p>But I have problems to follow the solution, because my SAML response captured by Fiddler does not contain an element like "X509Certificate". </p>
  
  <p>Edit(!):But I have to say that the metadata of my identity provider contains a element like "ds:X509Certificate" in "ds:keyInfo" with some content. But there also another empty "ds:keyInfo"-Element with an empty "ds:X509Data"-Element.</p>
  
  <p>Is there something wrong with the configuration of the identity provider?</p>
  
  <p>Can anybody tell my what is happening here?</p>
  
  <p>Complete log file: <a href="https://drive.google.com/file/d/0B3RlRCEjz-cvZGQ5aldzaUc0blE/edit?usp=sharing" rel="nofollow noreferrer">https://drive.google.com/file/d/0B3RlRCEjz-cvZGQ5aldzaUc0blE/edit?usp=sharing</a></p>
  
  <p>Thanks in advance,</p>
  
  <p>Andi</p>