SAML 1x & 2x endpoints

Rod Widdowson rdw at steadingsoftware.com
Tue Mar 24 11:24:14 EDT 2015


> If I look in the meta-data file we have of an SP (that is not an InCommon participant), does the bold data tell me that this SP supports 1.x and both 2.x SAML endpoints? 
> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"> 

Strictly speaking that tells you that the SP supports SAML1 protocol. You should look below to see which of the SAML1 Profiles is supports

  <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" ....
  <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"  ....

Those are the SAML1 "endpoints".

/Rod



More information about the users mailing list