Onlly sign assertions when needsSign configuration is true, by default true (backward compatibility)
Accept AssertionConsumerIndex, accept AuthnRequest without AssertionConsumerURL but with AssertionConsumerIndex. The resolution at this moment is a mocked AssertionConsumerURL ("http://assertion.consumer.service.generated.by.index/$N), it must be improved