How can I keep SAML assertion in SP?

[Paolo Mosconi]

Thanks I appreciate it.

Paolo Mosconi

-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu> 
Sent: lunedì 30 gennaio 2023 15:49
To: Paolo Mosconi <paolo.mosconi at actvalue.com>; Shib Users <users at shibboleth.net>
Subject: Re: How can I keep SAML assertion in SP?

> Why you believe it is a standard violation?

Because that "record" is not meant for exposure to any system other than the SP,  that's also why they're usually encrypted. The IdP is sending that assertion to one and only one party, it's not intended that the SP give to it something else, and it usually won't even be signed.

In any case, the help I can provide, I have. See list footer.

-- Scott