Ask HN: Should You Include a Certificate in a SAML AuthnRequest?

3•andy89•5h ago

When implementing SAML authentication, one question often arises:Should the Service Provider (SP) include its certificate directly in the <AuthnRequest>?

Comments

stop50•3h ago

Why, the other side should already know it.

oftenwrong•1h ago

I am not an expert in SAML, but my understanding is that the cert is typically included in the SP metadata. It seems to me that icluding the SP cert in the AuthnRequest would defeat the purpose of signing the request. Is that supported in the standard?

Access to the United States' President for Sale via Meme Coin

Show HN: Running C code inside of Scratch – proof-of-concept

My Superbooth 2025 Experience

U.S. Nuclear Emergency Support aircraft touched down in Pakistan

Thanks to Trump, OpenAI is struggling to get its Stargate project off the ground

An update on the OSU-OSL funding situation

DuckDB: H3

Create a new type of PKM for everyone

Several conferences relocate north of the border as Canadians refuse U.S. travel

Show HN: C1 – an OpenAI-compatible LLM API that renders real UI instead of md

Linux Kernel Exploitation Series

Rescission of Recordkeeping on Restricted Pesticides by Certified Applications

Byte Latent Transformer: Patches Scale Better Than Tokens

Hacker News Dark Mode (Chrome Extension)

The USA's First Pope

Show HN: UsePRD-Plan new features with full codebase context- drop into Cursor

A new type of AI is helping police skirt facial recognition bans

Combine Hash and Limited Preimage Data to Improve Security of Password Hash

Why Magician David Blaine Fasts for Days Before His Shows

Ask HN: Can On-device AI solve projected energy crisis?

Fingers wrinkle in the same pattern every time

Perplexity wrapping talks to raise $500M at $14B valuation

If Everyone Has Trauma, Everyone Has Trauma

I hacked a dating app (and how not to treat a security researcher)

At least five interesting things: Requiem for capitalism edition (#63)

Show HN: Shorts Stopper – Block YouTube Shorts on Safari iOS

We built AI-powered Root Cause Analysis that works

Microsoft shares rare look at Windows 11 Start menu designs it explored

How the Net Was Won – University of Michigan Heritage Project

The Internet 1997 – 2021