Some SAML 1 flow questions

[Rod Widdowson]

> >There will only be one SAML 1 flow, correct ?
> 
> If you mean for SSO, yes.

This leads into an "enquiring minds want to know" question that I have been
mulling over recently.  How are we going to handle the Attribute Push vs
Attribute Pull vs Artefact configuration (OK, so artefact isn't
configuration but it is a wrinkle at the end of the SSO flow).

It seems obvious that one could handle this by just having completely
different SSO flows which either have or do not have the required Actions,
but that seems heavyweight so I am assuming that there is some design which
allows this to be decided on the fly (maybe in sub flow as we do for C14N).

And as a related question, ISTR that in V2 we resolve Attributes during SSO,
even if we are not going to push them, then when we get an attribute query
we do the whole thing again.  Whilst (AIUI) you need to do this if you are
returning an artefact which references an Assertion with Attributes, I'm
guessing that it is not needed in this case and we can avoid it?