> Is that technically the whole document? The <samlp:ArtifactResponse> > (root) element has a different ID, the ID referenced in the <Reference> > belongs to the <samlp:Response> (sub) element. I would assume in this > case, only the <samlp:Response> element is signed.
That is correct. -- Scott
