Signatures in v3 vs v2

[Schwoerer, Brad]

I was wondering if it is possible that I could change how the signatures work for one of my SPs in v3.  I have made other changes for security settings and alternate credentials in v3 relying party, but can't find a setting corresponding to something like this>

I have an SP (non-shb) that works correctly with the way that a saml2p:Response works in v2.  The signature is a child of the Assertion.

<Response>
  <Issuer></Issuer>
  <Status></Status>
  <Assertion>
    <Issuer></Issuer>
    <Signature></Signature>
    <Subject></Subject>
    Etc
  </Assertion>
</Response>


That same SP (non-shib) is throwing a signing error with the saml2p:Respsonse from v3.  I assume that is because the signature is a child of the response and not of the assertion.

<Response>
  <Issuer></Issuer>
  <Signature></Signature>
  <Status></Status>
  <Assertion>
    <Issuer></Issuer>
    <Subject></Subject>
    Etc
  </Assertion>
</Response>

I have brought this to the attention of the vendor, but was wondering if there is configuration that can be made (or corrected if I messed something up) to change the location of the signature.

Thanks

-Bradley
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160112/023ade6d/attachment.html>