"SAML 2.0 Compliant"?

[MikeWho]

During an integration discussion with a client, we were asked if our
application (i.e. site) is "SAML 2.0 compliant". Is there a specific
definition of/criteria for this? Do all 2.0 bindings need to be supported,
or just any one?

Instead of a yes/no answer, I guess I'll have to go with "well, we are using
Shibboleth 2.5 SP to implement SP initiated SSO with HTTP Redirect binding;
and support just-in-time user provisioning." But I don't know if that's a
yes, no or maybe. 

I'm still feeling my way about a bit, and so amn't yet clear what's required
on our application side to support other bindings (if they are required for
compliance). 

Thanks for any advice,
Mike.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/SAML-2-0-Compliant-tp7587053.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.