what controls assertion signing?
Mark K. Miller
max at psu.edu
Thu Feb 5 19:00:56 EST 2015
If metadata for an SP has WantAssertionsSigned="true" in it, but the
profile in the relying party config on the IdP has signAssertions="never"
should assertions from that IdP to that SP be signed, or not?
And, for my InCommon Federation friends (yes, I realize this list is more
general than that) is there a way to have InCommon metadata include
WantAssertionsSigned="true" for an SP's metadata?
Thanks all!
Max
More information about the users
mailing list