Documentation of IdP security:Rule declarations? (relying-party.xml)

[Erdos, Marlena]

Hi all,


Someone here at Harvard who works for our IT security group has asked for
a line by line description and explanation of each of the security rules
in relying-party.xml .

I haven't found a document that addresses this request:  SAML docs address
the conceptual aspects of replay, authentication etc,  but I haven't found
something that links the concepts to the details that are in
relying-party.xml .   I include a relevant snippet of relying-party.xml
below my sig.

Essentially, what my colleague is asking for is "what does each rule do"
and "what are the options for each rule."   FWIW, he understands what
"replay" and the like is.

Is this documented anywhere?

Thanks so much!
Marlena

<security:SecurityPolicy
id="shibboleth.SAML1ArtifactResolutionSecurityPolicy"
xsi:type="security:SecurityPolicyType">
        <security:Rule xsi:type="samlsec:Replay" />
        <security:Rule xsi:type="samlsec:IssueInstant" />
        <security:Rule xsi:type="samlsec:ProtocolWithXMLSignature"
trustEngineRef="shibboleth.SignatureTrustEngine" />
        <security:Rule xsi:type="security:ClientCertAuth"
trustEngineRef="shibboleth.CredentialTrustEngine" />
        <security:Rule xsi:type="samlsec:MandatoryIssuer" />
        <security:Rule xsi:type="security:MandatoryMessageAuthentication"
/>
    </security:SecurityPolicy>