OpenSAML user discussion

["Pantvaidya, Vishwajit" <>]

For signatures, don't you sign with the private key and then the recipient 
validates with the public key? So I thought, the test IdP since it would 
generate a signed SAML message would need a private key to test with.


-----Original Message-----
From: Scott Cantor 
[mailto:]
Sent: Friday, November 07, 2008 4:42 PM
To: 

Subject: RE: [OpenSAML] [OpenSAML2] Testing SAML relying party browser post 
profile

> The test IdP seems just right. Does it let me provide my own
public-private
> or secret keys that I generated to test my SP?

You have to supply metadata, which includes the public key. Your private key
is your business.

-- Scott