It requests signed assertions send by the IdP. The WantAssertionsSigned attribute on the <md:SPSSODescriptor> element declares that the service provider wants the <saml:Assertion> element to be digitally signed This attribute causes a metadata-aware identity provider to auto-configure itself at run time.
        <md:SPSSODescriptor WantAssertionsSigned="true" ...>