SignAssertions is not needed as a flow action because assertion signing is being done in the outbound message handler, correct ? https://wiki.shibboleth.net/confluence/display/IDP30/SAML+1.1+Browser+SSO https://issues.shibboleth.net/jira/browse/IDP-186