Re: [saml-dev] how to verify the sender of a SAML authn request

["Cantor, Scott" <cantor.2@osu.edu>]

On 8/1/13 6:59 PM, "Mitu Singh" <mitusingh27@yahoo.com> wrote:
>
>I looked at the saml-profile document. For Web SSO Profile (Section
>4.1.4.1 <AuthnRequest> Usage) "The <Issuer> element MUST be present and
>MUST contain the unique identifier of the requesting service provider
>
>So the Issuer will help identify the sender in case of WebSSO profile. Is
>that correct?

Yes.

-- Scott