Sequence for Signing and Encrypting SAML Assertions
Last Updated:
Overview
This article provides the order in which Auth0 performs the sequence of both signing and encrypting a SAML assertion when configured to do both.
Applies To
- SAML Assertions
Solution
Auth0 signs and then encrypts the assertion. Encryption ensures that the recipient is the only one with access to the content. After decryption, the recipient can validate the signature to confirm the origin.
Related References:
