I have been pouring over the internet this week trying to find a solution to my issue. Basically, I have a vendor who wants to use simplesamlphp to send encrypted information to our server. We send them our public certificate. They have sent us the SAML Response message. I am able to decode the message, and see the XML structure, but the assertion is still encrypted, as I would expect. I know the certificate and the ciphervalue are both correct, because when I put the info into this online tool: https://www.samltool.com/decrypt.php, the assertion is decrypted perfectly. I have emailed them for their script, but have heard nothing.
Basically, I don't really need SAML here, I just need to be able to use my private key and the encrypted data in the XML document to decrypt the assertion data.
Please let me know if you need more info. Thanks!
