"SAML 2.0 Compliant"?

Tom Scavo trscavo at gmail.com
Tue May 28 16:45:03 EDT 2013


On Tue, May 28, 2013 at 4:38 PM, MikeWho <who at me.com> wrote:
> During an integration discussion with a client, we were asked if our
> application (i.e. site) is "SAML 2.0 compliant". Is there a specific
> definition of/criteria for this?

No, not that I'm aware of. Of course there's the OASIS SAML2 Profiles
document but that spec necessarily allows for wide variability among
deployments.

> Do all 2.0 bindings need to be supported,
> or just any one?

I don't believe there's a clear answer to that question.

Tom


More information about the users mailing list