Sign Saml Response with Keystore

Hello everyone, I wanted to ask if anyone knows how, after creating a SAML Assertion through the appropriate policy, insert this assertion in a SAML Response and sign it with the same keystore used to sign the assertion. Thank you

Hello @DomenicoP , we saw your question and wanted to let you know we’re keeping it on our radar. We’ll also invite others in the community to pitch in and share their thoughts. :blush:

what? You want to sign the Assertion and also sign… the response? Why? Why not just sign the Response?

In the GenerateSAMLAssertion you can specify the XPAth of the thing you want to sign. You can sign the outer response. That signature will ALSO apply to the assertion which is contained within.

If you really want a signature wrapping a signature (I have never seen this), you can call GenerateSAMLAssertion twice.

But what problem are you really trying to solve? Can you show an example of the structure of the signed document you want to deliver? Is there a public document or specification describing what you need to achieve?