IdPv3 default config for the SSO profile to sign only the response but not the assertion is in contradiction with SAML2int 0.2.1

[Cantor, Scott]

> Now that you mention it, I need to double-check that we required SPs
> support requiring signed responses. I meant to do that, I may have forgotten
> to.

I did in fact forget, just sent something to Kantara FI list to fix it.

-- Scott