ADFS + SSO not work

Steps to reproduce

1. upgrade Nextcloud from 14.0.3 to 15.0.2
2. install the SSO&SAML 2.1
3. config the setting

Expected behaviour

Tell us what should happen

Actual behaviour

have error in log shown below

[index] Error: OneLogin\Saml2\Error: Invalid array settings: idp_cert_or_fingerprint_not_found_and_required at <<closure>>

0. /var/www/nextcloud/apps/user_saml/lib/Controller/SAMLController.php line 219
   __construct({strict: true,de ... }})
1. /var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php line 166
   getMetadata(null)
2. /var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php line 99
   executeController(OCA\User_SAML\Co ... {}, "getMetadata")
3. /var/www/nextcloud/lib/private/AppFramework/App.php line 118
   dispatch(OCA\User_SAML\Co ... {}, "getMetadata")
4. /var/www/nextcloud/lib/private/AppFramework/Routing/RouteActionHandler.php line 47
   main("OCA\\User_SAML\ ... r", "getMetadata", OC\AppFramework\ ... {}, {_route: "user_saml.SAML.getMetadata"})
5. <<closure>>
   __invoke({_route: "user_saml.SAML.getMetadata"})
6. /var/www/nextcloud/lib/private/Route/Router.php line 297
   call_user_func(OC\AppFramework\ ... {}, {_route: "user_saml.SAML.getMetadata"})
7. /var/www/nextcloud/lib/base.php line 987
   match("/apps/user_saml/saml/metadata")
8. /var/www/nextcloud/index.php line 42
   handleRequest()

GET /apps/user_saml/saml/metadata

Server configuration

Operating system:
Ubuntu 16.0.4

Web server:
Apache2

Database:
Type: mysql
Version: 10.2.12

PHP version:
Version: 7.0.32

Nextcloud version: (see Nextcloud admin page)
Nextcloud Version : 15.0.2

Where did you install Nextcloud from:
direct updater

List of activated apps:
Enabled:

• accessibility: 1.1.0
• activity: 2.8.2
• admin_audit: 1.5.0
• calendar: 1.6.4
• cloud_federation_api: 0.1.0
• comments: 1.5.0
• contacts: 3.0.2
• dav: 1.8.1
• federatedfilesharing: 1.5.0
• federation: 1.5.0
• files: 1.10.0
• files_external: 1.6.0
• files_pdfviewer: 1.4.0
• files_rightclick: 0.10.2
• files_sharing: 1.7.0
• files_texteditor: 2.7.0
• files_trashbin: 1.5.0
• files_versions: 1.8.0
• files_videoplayer: 1.4.0
• firstrunwizard: 2.4.0
• gallery: 18.2.0
• logreader: 2.0.0
• lookup_server_connector: 1.3.0
• nextcloud_announcements: 1.4.0
• notifications: 2.3.0
• oauth2: 1.3.0
• onlyoffice: 2.1.2
• ownbackup: 18.11.0
• password_policy: 1.5.0
• previewgenerator: 2.0.0
• provisioning_api: 1.5.0
• serverinfo: 1.5.0
• sharebymail: 1.5.0
• socialsharing_email: 1.0.5
• support: 1.0.0
• survey_client: 1.3.0
• systemtags: 1.5.0
• tasks: 0.9.8
• theming: 1.6.0
• twofactor_backupcodes: 1.4.1
• unsplash: 1.1.3
• updatenotification: 1.5.0
• user_ldap: 1.5.0
• user_saml: 2.1.0
• workflowengine: 1.5.0
  Disabled:
• encryption
• files_retention
• ransomware_protection
• spreed
• spreedme

Nextcloud configuration:

{
"system": {
"passwordsalt": "REMOVED SENSITIVE VALUE",
"secret": "REMOVED SENSITIVE VALUE",
"trusted_domains": [
"localhost",
"192.168.1.18",
"nextcloud.xxxxxxx.com",
"nextcloud.xxxxxxx.com"
],
"datadirectory": "REMOVED SENSITIVE VALUE",
"overwrite.cli.url": "https://nextcloud.xxxxxxx.com/",
"dbtype": "mysql",
"version": "15.0.2.0",
"dbname": "REMOVED SENSITIVE VALUE",
"dbhost": "REMOVED SENSITIVE VALUE",
"dbport": "",
"dbtableprefix": "oc_",
"mysql.utf8mb4": true,
"dbuser": "REMOVED SENSITIVE VALUE",
"dbpassword": "REMOVED SENSITIVE VALUE",
"installed": true,
"instanceid": "REMOVED SENSITIVE VALUE",
"maintenance": false,
"mail_smtpmode": "smtp",
"memcache.local": "\OC\Memcache\Redis",
"filelocking.enabled": true,
"memcache.distributed": "\OC\Memcache\Redis",
"memcache.locking": "\OC\Memcache\Redis",
"redis": {
"host": "REMOVED SENSITIVE VALUE",
"port": 0,
"timeout": 0,
"dbindex": 0,
"password": "REMOVED SENSITIVE VALUE"
},
"htaccess.RewriteBase": "/",
"ldapIgnoreNamingRules": false,
"ldapProviderFactory": "\OCA\User_LDAP\LDAPProviderFactory",
"mail_from_address": "REMOVED SENSITIVE VALUE",
"mail_domain": "REMOVED SENSITIVE VALUE",
"mail_smtphost": "REMOVED SENSITIVE VALUE",
"mail_smtpport": "2828",
"theme": "",
"loglevel": 2,
"onlyoffice": {
"verify_peer_off": true
},
"mail_smtpauthtype": "LOGIN",
"trashbin_retention_obligation": "7,auto",
"updater.secret": "REMOVED SENSITIVE VALUE"
}
}

Client configuration

Browser:
Chrome Version 71.0.3578.98

Operating system:
Windows7

Nextcloud log (data/owncloud.log)

nextcloud (1).log

Start by reproducing the failure at /apps/user_saml/saml/metadata with Nextcloud 15.0.2 and SSO&SAML 2.1, then inspect apps/user_saml/lib/Controller/SAMLController.php around line 219 and the attached log. Done means determining why the ADFS configuration lacks the required certificate setting and making the metadata request work without the reported validation error.