View source for I5:FeatureTest-OpenID Relying Party validates the 1.1 signature on the assertion is valid and all fields that are required to be signed are signed

{{FeatureTest
  |name               = OpenID Relying Party validates the 1.1 signature on the assertion is valid and all fields that are required to be signed are signed
  |testtype           = OpenID Authentication
  |identifier         = FTR-orp-sec-6
  |areatested         = 
  |status             = active
  |summary            = Tests OpenID RP's verification of response signature 
  |testedrole         = OpenID Identity Relying Party
  |referencesolution1 = JanRain PHP
  |referencesolution2 = Plaxo Signin
  |success            = The RP detects the replay and rejects asertions with duplicate nonces
  |failure            = The RP allows multiple logins with the same nonce
}}
# Open the result page for your solution and this test.
# Open the OpenID login page for your relying party.
# Enter http://test-id.org/RP/SignatureCheck11.aspx into the OpenID login field of the page.
## You will not be prompted for authentication.
## There are 4 sub tests
## Click on the the buttons to perform each of the tampering tests in turn.
# When you are returned to the RP enter http://test-id.org/RP/SignatureCheck11.aspx to procede with the next test.
# Success is the RP rejecting all 4 login attempts.
# Failure is the RP allowing a login
# Set outcome in the results page:
## If the success criteria was met, set the outcome to "Works".
## If the test failed, set the outcome to "Failed" and enter information about the failure in the Notes section.
## If other issues occurred set the result to "Issues" and describe them in the Notes section.
# Add either four tilde <nowiki>~~~~</nowiki> signs or a text name into the "Tested by" parameter.
# Update the Date Tested, Browser, and Operating System lines of the results page.