SAML 1x & 2x endpoints

[Tom Scavo]

On Tue, Mar 24, 2015 at 11:24 AM, Rod Widdowson
<rdw at steadingsoftware.com> wrote:
>
>> If I look in the meta-data file we have of an SP (that is not an InCommon participant), does the bold data tell me that this SP supports 1.x and both 2.x SAML endpoints?
>> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
>
> Strictly speaking that tells you that the SP supports SAML1 protocol. You should look below to see which of the SAML1 Profiles is supports
>
>   <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" ....
>   <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"  ....
>
> Those are the SAML1 "endpoints".

Yes, that's true but I think it's also true that the
protocolSupportEnumeration XML attribute must accurately report the
supported protocols or some software won't even bother to look at the
endpoints.

Tom