[Satosa-dev] signed authn requests

In an ideal federation, yes. Unfortunately we find some IdPs cannot or will not update their metadata appropriately. We could always provide our own copy of the IdP's metadata, but that brings with it its own maintenance issues. The primary reason for deploying the proxy is to work around limitations of federated IdPs. This is just another example. Thanks, Scott K