Sending the SAMLReply/Assertion

[Peter Schober]

* Mak, Steve <makst at upenn.edu> [2021-07-12 15:54]:
> I have one client where we sign the assertion and they store the
> signed assertion for analysis.

>From where? I don't get the signed assertion from the AssertionExport
endpoint but a cleaned-up one:

$ curl -sS '127.0.0.1/Shibboleth.sso/GetAssertion?key=_foo&ID=_bar | tail -1 | xmllint --format - | head -4
<?xml version="1.0"?>
<saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_bar" IssueInstant="2021-07-12T13:35:16.087Z" Version="2.0">
  <saml2:Issuer>https://idp.example.org</saml2:Issuer>
  <saml2:Subject>

Best,
-peter