Question

I'm working to implement a SAML service. As such, I believe the identity provider is supposed to digitally sign the SAML assertion using the service provider's public key before sending the assertion to the service provider (which the service provider verifies using their private key). However, I'm having a hard time finding any examples of using the SignXML object (in C#) to sign using a public key. All of the examples are signing using the private key.

Any examples or advise would be greatly appreciated.

Was it helpful?

Solution

No - the correct behavior is for the identity provider to sign with its own private key and the service provider to verify with the identity provider's public key.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top