You can remove the anonymous access for this page and this should be redirected to authentication.

again, this would be the issue with the encryption used by the IdP to sign the assertion. I would recommend, you ask the IdP about which encryption they are using.

I do not believe this is a jar issue.  I think the encryption used by the IdP is different from the one provided to you.https://examples.javacodegeeks.com/core-java/security/invalidkeyexception/java-security-invalidkeyexception-how-to-solve… Again this is also a hunch as I am not exactly sure why th...

The IdP certificate is not a valid one as the SAML Auth Handler is trying to validate the SAML Response against the certificate added into the AEM trust store.Please correct the certificate and you should not see this issue.same can be seen the API as well  private boolean verifySignatures(Element p...

I am unable to see any file under /var/classes. any idea why this might be happening ?