WantAssertionsSigned attribute on the <md:SPSSODescriptor> element declares
that the service provider wants the <saml:Assertion> element to be digitally signed
This attribute causes a metadata-aware identity provider to auto-configure itself at run time.
<md:SPSSODescriptor WantAssertionsSigned="true" ...>