OpenSAML user discussion

[Brent Putman <>]

wrote:

 My mean is  whether   <ds:Signature> ..<ds:Signature> included in <samp:Assetion ..> ..</samp:Assetion>  will affect the SignatureValidator.validate(..).  

  

No, it doesn't affect it.  What you are doing there in SAML is called an enveloped signature (vs detached and enveloping.  See the XML Signature spec for me info).  In the SignedInfo/Reference, the enveloped signature Transform logically removes the Signature element from the data over which the signature is computed.  The W3C XML Signature spec covers all this if you want to know more.