SAMLAuthForSigning
Used to provide Authentication for independent signing services. Requires the AuthnRequest property SignMessage to be resolved (i.e. it requires the config parameter "resolveSAMLRequestProperties" to be set to "true" either at this authenticator, or at one earlier in the authentication flow like a Dispatch or SAMLDataSave). Provides a user-facing message showing them the message they are asked to sign, before dispatching the request to another authenticator for the actual authentication.
If the user sees the SignMessage and proceeds to authenticate, the AssertionProvider used in the pipe will automatically add the attribute "urn:oid:1.2.752.201.3.14" (signMessageDigest) to the Assertion.
Properties
Example Configuration
{ "alias": "samlauthforsigning", "name": "SAMLAuthForSigning", "configuration": { "nextAuthenticator": "myupwauthenticatoralias", "idpID": "myIdpID" } }
Requirements
Another SAML Authenticator configured, resolveSAMLRequestProperties set to "true" in either this authenticator, or one earlier in the flow (e.g. a Dispatch or SAMLDataSave).