The SAML response is a signed XML (xml-dsig) and the signature must be verified in order to ensure the correctness of the assertion.
Signicat provides libraries that will help you verifying the SAML using Java or C#.
Verifying the SAML Response
819 views June 13, 2017 September 28, 2018 3