artifact response to attribute query?
Brent Putman
putmanb at georgetown.edu
Fri Jun 15 04:28:37 BST 2012
On 6/14/12 12:46 PM, Cantor, Scott wrote:
> It's probably defined on a base type used for all the SAML profile
> handlers
I think that's why. Technically any SAML protocol message can compose
with and go over the artifact binding (or any defined binding for that
matter), so I think that's why it appears that way in the IdP's
configuration XML schema hierarchy.
> No artifacts involved with a SOAP-based exchange as you know.
Right, of course, but AttributeQuery does not technically imply SOAP.
You could have a query over a front-channel binding, including
artifact. Why would one do that? Don't know, but it's technically
possible and allowed by the spec, so the IdP design reflects that. Of
course, that doesn't mean we necessarily have to call it out explicitly
in the wiki docs if it's going to confuse people...
More information about the users
mailing list