RE: [saml-dev] A rogue SP x impersonating a principal Z to SP y?

> It looks like the 'Audience restriction' in a signed, integrity ensured
> assertion can be used by the iDP to signal, that this assertion should not
> be used outside of SP x. Now the SP y will also have check it. Is this the
> canonical way to do it?

Yes.

-- Scott