Lasso requires the SAML Service Provider metadata to contain a public key, and will refuse to decode any messages received if it doesn't have any.

This error is caught in ipsilon/provider/saml2/auth.py line 118, as:
DEBUG(ipsilon/providers/common.py:93 Redirect.debug()): saml2:

We need to check the metadata on import, so we can refuse it at that point instead of just 500'ing when the request actually comes in.

This issue ticket was originally removed from the tracker as it clashed with the pull request.
See upstream ticket for migration details.