change options "sign_asertion" and "sign_response" to be dependent on their value, not just on their existence (previously "sign_response=False" would still generate a response signature). Change from boolean to string, to allow for future optional signatures (e.g. like in shibboleth: sing on front channel, but not over https/soap) make dsgi algorithms configurable (config args.AuthnResponse.sign_signature_alg etc.)
change options "sign_asertion" and "sign_response" to be dependent on their value, not just on their existence (previously "sign_response=False" would still generate a response signature). Change from boolean to string, to allow for future optional signatures (e.g. like in shibboleth: sing on front channel, but not over https/soap)
make dsgi algorithms configurable (config args.AuthnResponse.sign_signature_alg etc.)

rohe/saml2test,rohe/saml2test