...
If a particular web application is registered to obtain a OAuth2 token using the SAML response generated from the SSO authentication, when creating the service provider for this web application, it needs to give the following mandatory details in of the service provider.
- Enable Response Signing
- Enable Assertion Signing
- Enable Audience Restriction
...