Force Sign Assertions - Githubissues

mcguinness / saml-idp

Simple SAML Identity Provider (IdP) for Node

MIT License

447 stars 172 forks source link

Force Sign Assertions #50

Open pascalschulz opened 5 years ago

pascalschulz commented 5 years ago

Hi,

is there a way how I can force the IDP to sign all my assertions. I am running into problems testing against an SP, which needs my assertions to be signed.

Best, Pascal

mcguinness commented 5 years ago

You should be able to add signedAssertion: true to the idpOptions params object in app.js and expose via a new CLI arg similar to signResponse: argv.signResponse

pascalschulz commented 5 years ago

May I ask you what the reason is that both "signAssertion" and "signResponse" are not part of the idpOptions by default?

At least by looking at "saml-idp --help", I don't seem to find them.

However, I will try your suggested way to integrate it.