If your IdP log complains with the following logs:

2008-06-06 12:19:51,754 DEBUG [IdP] - Constructed a trust list from key authority.  Attempting path validation...

2008-06-06 12:19:51,756 ERROR [IdP] - Encountered an error during validation: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

2008-06-06 12:19:51,756 ERROR [IdP] - Supplied credentials (CN=xxx.sp.edu.au,OU=Some OU,O=SP University,L=Sydney,C=AU) are NOT valid for provider
(urn:mace:federation.org.au:testfed:level-1:xxx.sp.edu.au).

2008-06-06 12:19:51,756 ERROR [IdP] - Error while processing request: org.opensaml.SAMLException: Invalid credentials for request.

Then you may want to:

• check if the issue solved by CertificateIssues
• check if your CA (or any of its intermediate CA) is included in metadata (contact us if you're not sure)
• check that your IdP has the latest updated metadata file (cronjob is working?)

to top