What is the default ProtocolBinding for a SP

Cantor, Scott cantor.2 at osu.edu
Tue Apr 16 10:09:42 EDT 2013


>I suppose if an AssertionConsumerServiceURL or Index has been supplied
>in the authnRequest the IdP could use SAML metadata (or internal
>configuration) to look up the binding for the endpoint.

It does its best to find an endpoint that matches the requested one, and
if it can't, it fails.

>> Is there a way to configure a default binding in IdP for a given SP?

In handler.xml via outboundBindingEnumeration.

>>IdP will pick the first element of AssertionConsumerService(if there
>> a multiple_ and its binding from the SP metadata? and that is kind
>> of the default

We follow the SAML metadata specificaton on endpoint selection based on
the isDefault attribute and the ordering. None of that applies if an index
or URL are provided.

-- Scott




More information about the users mailing list