Fix response and assertion signing defaults - SC-116
[java-idp.git] / src / installer / resources / conf-tmpl / relying-party.xml
index 94d3865..9477860 100644 (file)
@@ -57,8 +57,8 @@
                               includeAttributeStatement="true"
                               assertionLifetime="PT5M"
                               assertionProxyCount="0" 
-                              signResponses="conditional"
-                              signAssertions="never" 
+                              signResponses="never"
+                              signAssertions="always" 
                               encryptAssertions="conditional"
                               encryptNameIds="never" />
         
@@ -71,8 +71,8 @@
                               encryptNameIds="never" />
         
         <rp:ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile" 
-                              signResponses="conditional"
-                              signAssertions="never"
+                              signResponses="never"
+                              signAssertions="always"
                               encryptAssertions="conditional"
                               encryptNameIds="never"/>