SignAssertions action not needed ?

[Cantor, Scott]

On 2/4/14, 1:36 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:

>> I think it's actually pretty easy, all the components are there.
>
>Apologies for begin so clueless : if assertions in a response are
>signed, and then the response containing those assertions is signed,
>assuming the same signing parameters, by visually inspecting the
>response, the only way I can "see" the difference is by looking at
><SignatureValue/> before and after and confirming it has changed ?

No, every object signed has its own Signature element referencing the ID
of the object signed.

A signed response of a signed assertion has two Signature elements, one a
child of Assertion and one a child of Response.

-- Scott