Does SP3 not sign authn requests by default?

[Cantor, Scott]

As far as I know 3.0 should be signing if the IdP metadata asks for it, so that would be a regression, assuming it worked in 2.x. I'll check into it on Monday. The conditional behavior is very complex. But I would not have expected 3.0 to break it, it was a 2.6 change to complicate all that code.

This even came up back then:

https://issues.shibboleth.net/jira/browse/SSPCPP-783

The conclusion was that it was behaving as intended in 2.6 and that it honored the metadata by default.

-- Scott