Signature Reference Algorithm

[Cantor, Scott]

> Which one is the suggested way to set the reference digest algorithm? The
> commented one (through the SignatureSigningParameters) or through the
> BasicSignatureSigningConfiguration?

The suggested approach is "use Shibboleth" or use something else off the shelf. The world doesn't need more IdPs in Java. The non-suggested approach is to look at the code used by Shibboleth, see org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters

-- Scott