assertion not always signed

[Rich Graves]

> If you have to run at full DEBUG that just kills performance

Our transaction volume is so low that performance is not really an issue. I
changed idp.loglevel.idp and idp.loglevel.encryption to DEBUG for a while
(the latter saving the raw SAML -- I don't completely trust the Chrome SAML
Decoder).

Yeah, we'll also do the 3.3 upgrade. I'm excited about having MFA/Duo and
password expiration fixes officially supported -- they seem to do
everything we need, thanks! -- but have not been eager to do the work of
ripping all the local MFA/Duo and password expiration customizations out.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170114/dba61f52/attachment.html>