What is the default ProtocolBinding for a SP

[Peter Schober]

* lalithj <j_lalith at hotmail.com> [2013-04-16 06:43]:
> If a SP is sending a SAML Auth request to Shibboleth IdP without
> ProtocolBinding in it, is that an  issue?

In the schema ProtocolBinding is optional (as are all attributes on
the AuthnRequest element), the SAML WebSSO Profile doesn't seem to
require it either, but you can alawys ask about expected behaviour at
the OASIS saml-dev list.

I suppose if an AssertionConsumerServiceURL or Index has been supplied
in the authnRequest the IdP could use SAML metadata (or internal
configuration) to look up the binding for the endpoint.

> Is there a way to configure a default binding in IdP for a given SP?

If there's anything that you can do it's where pointed to you.
The rest is in the documentation.

> IdP will pick the first element of AssertionConsumerService(if there
> a multiple_ and its binding from the SP metadata? and that is kind
> of the default

I don't know what the software does in this case. Either you read the
source code or you try it out and tell us. Which might bring us to
less abstract questions, maybe.
-peter