On Tue, 18 Apr 2017, Qian, Yi wrote: > Hello, > > A vendor send metadata include WantAssertionSigned=true, but with no > certificate in, the oasis document has this attribute as optional, but > does not say if it requires certificate > > Thanks > Yi Yi, The assertion would be signed with your IDP's certificate/key, so no certificate/key is needed from the SP. Andy