Automatically try opposite MessageSignatureOrder and inverse isAssertionEncrypted in case of error

[KuSh]

Hello,

I've implemented, for a project that use samlify, automatic retry with opposite MessageSignatureOrder in case of ERR_FAILED_TO_VERIFY_SIGNATURE error and also retry with decryption in case of ERR_EMPTY_ASSERTION error

ATM it's "brute force" because if I get either of these two errors, I change the idp configuration and try again. Maybe a sane conf could be deduced from the metadata but I don't know enough about the protocol for that.

Could that be something that would be helpful to integrate in samlify ?

regards,
KuSh