Shibboleth client certificate

[Peter Schober]

* Adam Jones <amjones at skidmore.edu> [2012-05-10 11:41]:
> What's the usefulness of SOAP endpoints (or, "how does it work with
> IdP/SP communication")?

It allows the use of SOAP protocol bindings ;)

See
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAccountChecking
as an example of how one could get creative with SAML attribute
queries.
Also if webapps where integrated with SAML properly SOAP requests
("back-channel") could be used for reliable Single Logout,
cf. https://wiki.shibboleth.net/confluence/display/SHIB2/SLOIssues

For most new deployments today (i.e., using SAML2, encryption and
attribute "push" over the webbrowser, no SAML SLO) there's no need for
SOAP.
-peter