Great explanation! I agree that the signing algorithm config should actually affect
pysaml2 behavior instead of being just a placeholder. A consistent global option with
optional overrides makes the most sense.
By the way, if anyone needs a quick tool for testing or generating values, you can try
this
https://brattgenerator.id/.