Unsolicited SSO with AuthnRequestsSigned="true" SP metadata

[Cantor, Scott]

> I'm not aware of a configuration in the IDP that would allow it to
> ignore the SP's explicit request to reject unsigned authrequests
> (since that would make it non-conformant) I wouldn't be surprised if
> the IDP could in fact be configured to allow for that.

No, there isn't one since it would defeat the purpose of even supporting the flag in the metadata. There also isn't an exposed way to explicitly toggle off support for that flag being honored, as nobody has filed such a request.

-- Scott