OpenSAML user discussion

Hi Brent

Thanks for updating the signing information. Could you clarify a couple of 
areas for me.

1. In your example you have the following code. You marshall the assertion 
with the signature attached but don't store it anywhere. Then you sign the 
signature object. How does the Signer.signObject get the marshalled assertion 
in order to generate the signature.

2. Once the signature object has been signed (the signature value set), does 
the assertion need to be marshalled again to get the sign assertion?

try {
    
Configuration.getMarshallerFactory().getMarshaller(assertion).marshall(assertion);
} catch (MarshallingException e) {
    e.printStackTrace();
}

try {
    Signer.signObject(signature);
} catch (SignatureException e) {
    e.printStackTrace();
}

Thanks

Regards

Matthew Webb