It sounds like the main issue here is that the sign_alg configuration in pysaml2 is
partially implemented and only affects authentication responses, leaving other signatures
like logout requests or metadata unconfigured. A consistent approach would be to either
make sign_alg a global option affecting all SAML signatures, or split it into specific
options for each type of signature (authn_sign_alg, logout_sign_alg, metadata_sign_alg,
etc.) to avoid confusion. Consolidating the SATOSA changes into pysaml2 directly would
help standardize behavior across projects.
For testing or experimenting with system tools and configurations, you can also refer to
reliable sources like <a
href="https://terrariaapkdownload.com/">terraria
mobile mod</a> for related APK utilities.