# Auth0 as IdP: Is it possible to sign both the response and assertion?

**URL:** <https://community.auth0.com/t/auth0-as-idp-is-it-possible-to-sign-both-the-response-and-assertion/118942>\
**Category:** Get Help\
**Tags:** connections, saml-enterprise-connection\
**Created:** [October 19, 2023, 5:27pm UTC](https://community.auth0.com/t/auth0-as-idp-is-it-possible-to-sign-both-the-response-and-assertion/118942 "2023-10-19T17:27:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mmarion](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@mmarion](https://community.auth0.com/u/mmarion)\
**Post date:** [October 19, 2023, 5:27pm UTC](https://community.auth0.com/t/auth0-as-idp-is-it-possible-to-sign-both-the-response-and-assertion/118942/1 "2023-10-19T17:27:50Z")

</div>

I’ve read the documentation: [Sign and Encrypt SAML Requests](https://auth0.com/docs/authenticate/protocols/saml/saml-sso-integrations/sign-and-encrypt-saml-requests#sign-the-saml-responses-assertions)

And it seems that Auth0 only supports signing the response, or the assertion, not both. Is that the case? Is there a workaround to that? It seems like Auth0 acknowledges that having both signed is a valid requirement, since using Auth0 as an SP allows for exactly that configuration, but I can’t find documentation on how to configure that scenario when Auth0 is the IdP and the SP has the requirement that both are signed. Every similar request in the “community” help center is either unanswered, unhelpful, or very old. The parent company, Okta, supports this functionality, as do all other major IDaaS solutions, so I find it surprising that it doesn’t seem possible. Am I missing something?

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [October 26, 2023, 3:59pm UTC](https://community.auth0.com/t/auth0-as-idp-is-it-possible-to-sign-both-the-response-and-assertion/118942/3 "2023-10-26T15:59:01Z")

</div>

Hi @mmarion,

Welcome to the Auth0 Community!

It doesn’t look like this is currently possible. Feel free to submit a feature request in our #Feedback category. Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [November 9, 2023, 3:59pm UTC](https://community.auth0.com/t/auth0-as-idp-is-it-possible-to-sign-both-the-response-and-assertion/118942/4 "2023-11-09T15:59:21Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.