Peter Schober via users <users at shibboleth.net> [2024-02-21 13:22 CET]: > > where did we missed something ? > > The SP probably shouldn't accept unsigned assertions? I meant "The SP probably shouldn't accept unsigned messages." (which should be clear from the rest of my post but for clarity) -peter