OpenSAML user discussion

["Scott Cantor" <>]

> Before I investigate other things, is the above the correct way to produce
a
> signed Assertion within a Response?

Should be close. There's a test case for a signed assertion inside a signed
response that's manually built in the SAML1ResponseTest unit test.

The one difference that I saw is that you must be setting a key on the
Signature to use rather than passing it into the marshaller as a Credential.

-- Scott