What determines protocol of SAML2/POST assertion?

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2015-03-04 20:18]:
> > The odd thing about this is that we have specifically set the endpoint as
> > https in our metadata file. As per below.
> > 
> > <md:AssertionConsumerService
> > Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
> > Location="https://${ourHost}/auth/shib/SAML2/POST"
> > index="1"/>
> 
> Does the SP know anything about this location? It certainly doesn't
> read its own metadata to find out what you want the software to do.

I.e., the SP won't listen on that URL for SAML POST by default, you'd
need to change the handlerURL for that.
-peter