Exception when validating the signature of the assertion

[Cantor, Scott]

On 11/6/12 5:28 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote:
>
>3. When SP tries to validate the signature, theoretically it needs to:
>          a. make sure the signature is generated by the private key of
>the IdP
>          b. make sure the message is not modified by comparing the
>digest value of the assertion and decrypted signature.
>
>The method validateSignature(Signature signature, Credential
>validatingCredential) seems to only do the step (a), could you please
>tell me where and how we do step (b)? Maybe the Signature object contains
>some extra information than I imagined?

That method does b, not a. a is the job of a trust engine.

-- Scott