Hello @Salesforce Identity @SAML Admin
We are working to integrate Salesforce as IdP to a third party app as per configuration indicated in https://help.salesforce.com/articleView?id=identity_provider_about.htm&type=0
When testing the login, the integration fails because SAML generated by Salesforce [see attached] has both response and assertion signed which should not be the case as in the sample SAML in documentation. Is it possible to remove the < ds:Signature> info from < saml:Assertion>? Or is this a deviation from the standard behavior as expected from the documentation?
3 件のコメント

@Itzik Koren Thank you, if both response and assertion being signed is the standard and expected behavior, we will work with it. Sample SAML posted in the documentation caused the confusion, thanks for the clarification!