Getting Signed SAML assertion in application

[Leif Johansson]

On 2014-01-20 13:30, Stefan Rasmusson wrote:
> In our application we have the need to get the entire signed SAML
> assertion. Because of security reasons our backend does not trust the
> frontend or shiboleth SP and must be able to verify the IDP signature. 
> Is it possible to get the Assertion from the application some how?
>
>
I think you should reconsider your design.

If your frontend doesn't trust your backend you should move your
frontend "closer" to your backend.

        Cheers Lefi