Ask HN: Should You Include a Certificate in a SAML AuthnRequest?