A SAML Response can be signed in different ways:
With this tool, paste an unsigned SAML Response, provide the private key and the public X.509 certificate and get the SAML Response signed in the selected "mode."