RE: [wss] Proposed text on C14N

> The SAML token may contain its own digital signature.  A signed SAML token
> can then be placed in the SOAP header and the token signed.

I think in this case it may be simpler and more foolproof to include only
the issuer and assertion id under the second signature.

Hal