Sign SAML Response with or without Assertion Signature?

Question

When signing a SAML Response that also has a signed Assertion, should I:

A) Generate the Response signature without the Assertion signature. Then inject the Assertion signature after both signatures have been generated.

B) Generate the Assertion signature and include it when generating the Response signature.

C) Something else?

Answer 1

SAML is awful, every time I read answer they are almost correct, here is the correct algorithm distilled:

1. SHA1 the canonical version of the Assertion.
2. Generate a SignedInfo XML fragment with the SHA1 signature
3. Sign the SignedInfo XML fragment, again the canonical form
4. Take the SignedInfo, the Signature and the key info and create a Signature XML fragment
5. Insert this SignatureXML into the Assertion ( should go right before the saml:subject)
6. Now take the assertion(with the signature included) and insert it into the Response
7. SHA1 this response
8. Generate a SignedInfo XML fragment with the SHA1 signature
9. Sign the SignedInfo XML fragment, again the canonical form
10. Take the SignedInfo, the Signature and the key info and create a Signature XML fragment
11. Insert this SignatureXML into the Response
12. Add the XML version info to the response.

Thats it. SAML is completely awful. There are tons of little subtleties that make implementing SAML a nightmare(like calculating the canonical form of a subset of the XML(the assertion), also the XML version of XML documents is not included.

I finished my implementation, I hope never to revisit such pain again.