When NAM is acting as an IDP with a third party SP - the metadata from
the third party SP determines whether they expect assertions sent to
them to be signed. (within SPSSODescriptor WantAssertionsSigned="true")

However we've encountered one SP who wanted first the assertion to be
signed and then the entire response that contained the signed assertion
to be signed.

Is it possible to configure this in NAM? I've tried several options but
can't seem to find out where this can be done.

Alex McHugh
NetIQ Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support is provided via email.