Does SP3 not sign authn requests by default?
cantor.2 at osu.edu
Sun Jul 22 12:22:27 EDT 2018
As far as I know 3.0 should be signing if the IdP metadata asks for it, so that would be a regression, assuming it worked in 2.x. I'll check into it on Monday. The conditional behavior is very complex. But I would not have expected 3.0 to break it, it was a 2.6 change to complicate all that code.
This even came up back then:
The conclusion was that it was behaving as intended in 2.6 and that it honored the metadata by default.
More information about the users