Some SAML 1 flow questions

[Cantor, Scott]

On 2/4/14, 12:12 PM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>
>I'll highlight https://issues.shibboleth.net/jira/browse/IDP-80 - we need
>to
>make sure that the pull/query is configurable for the artefact/non
>artefact
>case otherwise we risk having the three round trips that the current IdP
>has
>because we cannot say artefact=push non-artefact=query.

I can comment there, but in a nutshell, there's some overlap here but they
are somewhat distinct issues. The old V1 code had two options, one for
controlling number of assertions and one for push/pull. They get entangled.

V2 dropped the single assertion option, and I'm not aware that it ever
issues two. If it does that for SAML 1 artifact, I didn't spot it, but
I'll check.

I don't favor adding back flexibility nobody has needed so the major
question is, what did V2 actually support. Then carry that along.

-- Scott