When signing a SAML Response that also has a signed Assertion should I:A) Generate the Response signature without the Assertion signature. Then inject the Assertion signature after both signatures have been generated.B) Generate the Assertion signature and include it when generating the Response signature.C) Something else.?.~ Thanks in advance!
Sign SAML Response with or without Assertion Signature?
- Thread starter Keepliers
- Start date