Issues Setting up SAML2 with ServiceNow

[Cantor, Scott]

> One quick question, if I may: I'm obviously still fairly new to Shibboleth... a
> previous comment above indicated that I have a lot of unnecessary signing
> going on. Are there any published best-practices and security
> recommendations on these types of things?

Yes, the defaults. Just don't change them without a specific reason, and then only in an override for the affected SP.

> If I recall correctly, I set that up based on an Internet2 training document that I found but
> perhaps I'm wrong?

I couldn't say, and the defaults have changed over time, but the current defaults in 2.4.x are basically the right ones for standard usage, and it's to sign the response, not the assertion.

-- Scott