[OpenSAML] samlP:response and saml:Assertionl's ds:Signature

[sailend...@gmail.com]

Hi ,

I am validiating SAMLResponse(in Service Provider) to authenticate the user
But
samlp:Response and saml:Assertion can have ds:Signature elements.So which signature we should validate ?

Thanks
Sailendra

[Chad La Joie]

Please refer to the SAML protocol specification for this. It's totally
dependent on your environment and what you're doing with the information.

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
chad....@switch.ch, http://www.switch.ch