Define a relying party profile for AuthnRequestsSigned="true"

[Cantor, Scott]

> I see that the default for all SAML profiles is
> 
>   signedRequestsPredicate = alwaysFalse
> 
> I don't know if this is the setting that corresponds to the SP's
> "AuthnRequests" one - so that's my first question.

It's not related at all. Peter answered the rest. I actually had thought we didn't even look at the flag, but there is a policy rule that should be enforcing it.

-- Scott