bergie/passport-saml — pull request #2 by jess-sheneberger (2012-09-28 21:56:10+00:00)
Title: improve ADFS compatibility

I'm using passport-saml with ADFS.

My ADFS produces SAML with enveloped signatures where the Signature node is three levels down, and the existing XPath in validateSignature is only looking for Signature nodes two levels down.

As far as I can tell from the SAML spec, the Signature node is allowed anywhere in the document. I validated both SAML from ADFS and feide.no against the XSD schemas provided alongside the SAML spec.