Request the SAML response *or* assertions to be signed

* according to the SAML spec, the IdP's responses need to be signed anyway

Request the SAML response or assertions to be signed
* according to the SAML spec, the IdP's responses need to be signed anyway
6f647105 · Moser, Maximilian · 86a1accb · 6f647105
Commit 6f647105 authored 1 year ago by Moser, Maximilian
--- a/config/saml2-backend.yaml
+++ b/config/saml2-backend.yaml
@@ -106,6 +106,7 @@ config:
        authn_requests_signed: false
        want_response_signed: false
        want_assertions_signed: false
+        want_assertions_or_response_signed: true
        allow_unsolicited: true

        endpoints: