> Having turned off signing, I have a customer now that reports this error: > > > Error from identity provider: > Status: urn:oasis:names:tc:SAML:2.0:status:Requester > Message: Signature required > > Will I need to set a rule like this for them? Yeah, more or less. -- Scott