Cert Issue from SP

[Brent Putman]

On 2/2/12 1:12 PM, Cantor, Scott wrote:
> I have a hard time believing anybody is using SimpleSign. Is it
> possible any of that gets invoked in the Redirect case? Even if not
> permitted by spec, if you passed a KeyInfo parameter, for example?

Yeah, me too, that's why I was asking the original poster to confirm. 
But no, I'm pretty sure the only way that the credential processing gets
called there is on SimpleSign.  That rule and the Redirect one inherit
from the same abstract class, which defines a no-op method for the
credential extraction, and the Redirect rule does not override it, since
that binding can't carry any key material in the request.