RE: [saml-dev] how service provider authenticate assertion

> 	   Identifier provider creates an assertion,then this assertion is
> transferred to service provider.
> how  service provider authenticate whether this assertion is in
> effect?thanks!

It's not in scope of the standard how you authenticate digital signatures or
certificates. Most people use some combination of SAML metadata, PKI
techniques, and various adaptations that make sense in their environment.

-- Scott