Ask HN: Should You Include a Certificate in a SAML AuthnRequest?

5•andy89•1d ago

When implementing SAML authentication, one question often arises:Should the Service Provider (SP) include its certificate directly in the <AuthnRequest>?

Comments

stop50•1d ago

Why, the other side should already know it.

oftenwrong•1d ago

I am not an expert in SAML, but my understanding is that the cert is typically included in the SP metadata. It seems to me that icluding the SP cert in the AuthnRequest would defeat the purpose of signing the request. Is that supported in the standard?

Ask HN: How are you acquiring your first hundred users?

Ask HN: How do you store the knowledge gained in a day?

Good luck to everyone applying for YC summer 2925 batch

Ask HN: Economists, what's your opinion on US tariffs?

FlyLoop – AI Agent for Scheduling Meetings and Managing Your Calendar

Ask HN: Cursor or Windsurf?

Ask HN: How do you like the Framework matte screen?

New AI Chatbot Apps

Which AI Agent is your favorite?

Ask HN: Is Slack Down?

Ask HN: How did you fund your early stage hardware startup?

Ask HN: What are good high-information density UIs (screenshots, apps, sites)?

Ask HN: Not sure about the future of tech

Ask HN: I burnt out, quit my job – any advice on moving to freelance/consulting?

Ask HN: Should You Include a Certificate in a SAML AuthnRequest?

Ask HN: Did GitHub UI become unbearably slow?

Ask HN: How much better are AI IDEs vs. copy pasting into chat apps?

Ask HN: Any recommendations for a portable music player

Ask HN: Where to get used hardware cheap?

Ask HN: Do You Prepare for Job Interviews? If So, How?

Ask HN: Are LLMs useful or harmful when learning to program?

Ask HN: Gemini Reliability Degrading?

Why is it so hard to find founders to bounce off ideas in city you are visiting?

Ask HN: What is the worst communications tool you've ever used?

Ask HN: Is big tech still more stable?

Image to 3D

Ask HN: Anyone using Chrome ext with AI for daily copywriting/social media?

Ask HN: RAG or shared memory for task planning across physical agents?

LLM Botnet: Are companies using botnets to scrape content?

Ask HN: Fictional business books like The Goal

Ask HN: Should You Include a Certificate in a SAML AuthnRequest?

Comments

Ask HN: How are you acquiring your first hundred users?

Ask HN: How do you store the knowledge gained in a day?

Good luck to everyone applying for YC summer 2925 batch

Ask HN: Economists, what's your opinion on US tariffs?

FlyLoop – AI Agent for Scheduling Meetings and Managing Your Calendar

Ask HN: Cursor or Windsurf?

Ask HN: How do you like the Framework matte screen?

New AI Chatbot Apps

Which AI Agent is your favorite?

Ask HN: Is Slack Down?

Ask HN: How did you fund your early stage hardware startup?

Ask HN: What are good high-information density UIs (screenshots, apps, sites)?

Ask HN: Not sure about the future of tech

Ask HN: I burnt out, quit my job – any advice on moving to freelance/consulting?

Ask HN: Should You Include a Certificate in a SAML AuthnRequest?

Ask HN: Did GitHub UI become unbearably slow?

Ask HN: How much better are AI IDEs vs. copy pasting into chat apps?

Ask HN: Any recommendations for a portable music player

Ask HN: Where to get used hardware cheap?

Ask HN: Do You Prepare for Job Interviews? If So, How?

Ask HN: Are LLMs useful or harmful when learning to program?

Ask HN: Gemini Reliability Degrading?

Why is it so hard to find founders to bounce off ideas in city you are visiting?

Ask HN: What is the worst communications tool you've ever used?

Ask HN: Is big tech still more stable?

Image to 3D

Ask HN: Anyone using Chrome ext with AI for daily copywriting/social media?

Ask HN: RAG or shared memory for task planning across physical agents?

LLM Botnet: Are companies using botnets to scrape content?

Ask HN: Fictional business books like The Goal