public SamlServiceProviderBuilder signatureRequired(boolean signatureRequired) {
        this.signatureRequired = signatureRequired;
        return this;
    }
Sets whether to require the received SAML objects to be signed. If enabled, the received SAML objects
are rejected when they are not signed or have invalid signature. Otherwise, the received SAML objects
will be accepted even if they are not signed, although the objects with an invalid signature will still
be rejected. It is <strong>strongly discouraged</strong> to disable this option because otherwise
an attacker can forge an SAML object to bypass authentication. This option is enabled by default.

@param signatureRequired {@code true} to reject the SAML objects without signature.
                         {@code false} to accept the SAML objects without signature.
saml/src/main/java/com/linecorp/armeria/server/saml/SamlServiceProviderBuilder.java