SAMLIDPKey (schemas/saml_idp_key.go)

Module exposing: SAMLIDPKey

// Source: https://github.com/authorizerdev/authorizer | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
// Provided via justclaw.it.com; keep this notice with the code.
package schemas

// SAMLIDPKey is a per-organization SAML IdP signing keypair: an RSA private key
// and its self-signed X.509 certificate. Authorizer signs the SAML assertions it
// issues (as an IdP) with this key; downstream SPs pin the certificate.
//
// The JWT signing key (Config.JWTPrivateKey) is deliberately NOT reused: SAML
// XML-DSIG requires an X.509 certificate wrapper, which the raw-PEM JWT key does
// not carry, and SAML key rotation is independent of JWT key rotation.
//
// ROTATION (Status field):
//   - "current" — the single active key NEW assertions are signed

... (truncated -- full source via MCP)