Re: Using SAML 2 Bearer token with our own UAA Server #uaa
toggle quoted messageShow quoted text
Assertion can be signed, encrypted(name ID) or both.
Unsigned and Unencrypted is not recommended.
Thanks Filip. You are correct and thanks for pointing it out. I will pass Assertion and see what happens.