Don't send keys in SP Metadata file that you don't want the IdP to use#117

Closed

waynewoodfield wants to merge 3 commits into

SAML-Toolkits:masterfrom

waynewoodfield:conditional-certs

Commits on Jul 15, 2017

Don't send the encryption key if you don't want assertions encrypted. Don't send the signing key if you aren't going to sign your authnrequests. The IdP will see these as indicators that you want…
Wayne Woodfield
committed

Commits on Jul 17, 2017

The signing cert is still needed if logout requests are signed
Wayne Woodfield
committed
The signing cert is still needed if logout requests or responses are signed
Wayne Woodfield
committed