How can I keep SAML assertion in SP?

[Cantor, Scott]

> Why you believe it is a standard violation?

Because that "record" is not meant for exposure to any system other than the SP,  that's also why they're usually encrypted. The IdP is sending that assertion to one and only one party, it's not intended that the SP give to it something else, and it usually won't even be signed.

In any case, the help I can provide, I have. See list footer.

-- Scott