Some SAML 1 flow questions

[Rod Widdowson]

> V2 dropped the single assertion option, and I'm not aware that it ever
> issues two. If it does that for SAML 1 artifact, I didn't spot it, but
> I'll check.

Certainly at one stage I was seeing three round trips for SAML1 (login/fetch
AuthN/fetchAttributes) and the time taken to run a quick test makes me feel
that that it is still like that.  Whether that *matters* is another thing
entirely.  Noone (except me) has complained.....

R