<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="text-align:left; direction:ltr;">
<div>On Tue, 2020-06-09 at 16:05 -0400, Lohr, Donald wrote:</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<div>Are you able to go in to your identity provider, go to the service provider configuration, and ensure that the IDP signs the SAML Assertion?</div>
<div><br>
</div>
<div>How can I actually prove this or not prove it?</div>
</blockquote>
<div><br>
</div>
<div>Install saml-tracer for chrome or firefox and inspect the SAML assertion. I believe you're looking for the following tags:</div>
<div><br>
</div>
<div style="margin-left: 3ch;">
<div> <ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#" >?="">http://www.w3.org/2000/09/xmldsig#"></a>;</div>
<div> <ds:SignedInfo></div>
<div> <ds:CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>" /></div>
<div> <ds:SignatureMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256">http://www.w3.org/2001/04/xmldsig-more#rsa-sha256</a>" /></div>
<div> <ds:Reference URI="#_5419d3961658e78b631941fcfacc9926"></div>
<div> <ds:Transforms></div>
<div> <ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>" /></div>
<div> <ds:Transform Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#" >?="">http://www.w3.org/2001/10/xml-exc-c14n#"></a>;</div>
<div> <ec:InclusiveNamespaces xmlns:ec="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"</div>
<div> PrefixList="xsd"</div>
<div> /></div>
<div> </ds:Transform></div>
<div> </ds:Transforms></div>
<div> <ds:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256">http://www.w3.org/2001/04/xmlenc#sha256</a>" /></div>
<div> <ds:DigestValue>4...</ds:DigestValue></div>
<div> </ds:Reference></div>
<div> </ds:SignedInfo></div>
<div> <ds:SignatureValue>...</ds:SignatureValue></div>
<div> <ds:KeyInfo></div>
<div> <ds:X509Data></div>
<div> <ds:X509Certificate>...</ds:X509Certificate></div>
<div> </ds:X509Data></div>
<div> </ds:KeyInfo></div>
<div></ds:Signature></div>
</div>
</body>
</html>