On 7/12/21, 10:36 AM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote: > From where? I don't get the signed assertion from the AssertionExport > endpoint but a cleaned-up one: It will contain the signature if it's been signed, most aren't of course, the response is. -- Scott