Include RSAKeyValue In Assertions in IDP v3

[Cantor, Scott]

On 11/8/16 9:38 AM, Doug Holmes wrote:
> 
> I am using Shibboleth v3 and I'm looking for exactly that customization,
> to create the RSAKeyValue element in the Signature block for a
> particular SP.  I cannot find any example online for this and I'm not
> familiar enough with the source code to determine how it might be
> configured.  

Neither do I.

I know you need a custom SecurityConfiguration on a relying party, and
you'd probably need to override the SigningConfiguration slot with an
object with a non-default keyInfoGeneratorManager property.

The mechanics of overriding those objects is illustrated with the
SHA1/SHA2 example of changing the algorithms, but this involves a
different property.

Beyond that, I don't know.

These are not use cases we have attempted to make practical. Of course
anything can be done with enough pain and effort.

-- Scott