This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 79%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
What is the difference between Sign SAML response & Sign SAML assertion technically??
Hi @Ttech , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?
Thank you,
James
Hi @Ttech , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?
Thank you,
James
Hi @Ttech , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?
Thank you,
James
Hi @Ttech , the application you are configuring does not require both the SAML response and the SAML assertion to be signed together. When you choose "Sign SAML response", only the SAML response is signed, and when you choose "Sign SAML assertion", only the SAML assertion is signed.
Please let me know if you have any questions and I can help you further.
If this answer helps you please mark "Accept Answer" so other users can reference it.
Thank you,
James
Thanks!
I would like to know what "Sign SAML response" can do compared to "Sign SAML assertion" technically and vise versa. Are there any specific differences and what benefits we can get by choosing one of them??
Thank you,
Hi @Ttech , signing the SAML response means that the entire response is signed, including the assertion and any additional information that may be included in the response. This provides a higher level of security, as it ensures that the entire response has not been tampered with.
Signing the SAML assertion means that only the assertion is signed. This is a more lightweight option, as it only signs the most important part of the response. However, it may be less secure, as it does not provide protection against tampering of other parts of the response.