Yes, I see that now in various places in [SAMLProf]. It makes sense.
Thanks, Ari.
Tom
On 7/7/06, Ari Kermaier <> wrote:
> I would suggest that the Assertion MUST be signed, and the Response MAY be signed. This is more in line with the SAML 2.0 main specifications.
>
> > [section 4] Evidently, both the <Response> and the <Assertion> MUST be
> > signed (lines 194--195 and lines 250--251, resp.). Is this really
> > necessary? I suggest the <Assertion> MAY be signed if the situation
> > warrants.
> >
>
> ---------------------
> Ari Kermaier
> Oracle Corporation
>
>
