OpenSAML user discussion

["Cantor, Scott E." <>]

>
>I'm trying to validate a signature that is being sent along with a
>SAMLResponse to my service provider via the HTTPRedirect protocol binding.

If you're doing SSO, that's not legal (redirect is not a valid binding
with that leg of the profile), but regardless, redirect signatures are not
XML signatures and are not inside the XML, they're constructed from the
URL parameters. Refer to the binding specification.

-- Scott