jitbit / AspNetSaml

Very simple SAML 2.0 consumer module for ASP.NET/C#
https://www.jitbit.com
Apache License 2.0
361 stars 118 forks source link

How to verify signature using a SecurityKeyIdentifierClause? #38

Closed chtenb closed 2 years ago

chtenb commented 4 years ago

To verify the signature of the SAML response, the code calls the method IsValid(), which in turn calls signedXml.CheckSignature(_certificate, true), with _certificate being a X509Certificate2 object.

Instead of such a X509Certificate2 object, I'm getting handed a SecurityKeyIdentifierClause object from the System.IdentityModel.Tokens namespace. Is it possible to use this clause to verify the signature of the SAML response?