WantAssertionsSigned
attribute on the <md:SPSSODescriptor>
element declares
that the service provider wants the <saml:Assertion>
element to be digitally signed
This attribute causes a metadata-aware identity provider to auto-configure itself at run time.
<md:SPSSODescriptor WantAssertionsSigned="true" ...>