Signature tag in assertion request

[Cantor, Scott]

> Hi Scott, Thats what I suspected too. However, this
> parameter is set to true on other IdP metadata files too .

The SP is only going to sign in two cases:

- that flag
- you tell it to sign

Setting the SP option to false will also forcibly disable the signing regardless.

https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334379/SigningEncryption#Transport-Authentication

-- Scott