IdP Metadata

[Peter Schober]

* Marco Malavolti <marco.malavolti at garr.it> [2016-06-23 09:17]:
>   – Replace the endpoint:
>     <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
>     with:
>     <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
>     (because my IdP uses persistent SAML NameIDs)

Don't stop publishing support for transient NameIDs, you can have as
many NameIDFormat elements in there as you support.
And of course only announce support for persistent NameIDs if you
actually support them (which is a very different and rather involved
discussion).

> <AttributeAuthorityDescriptor> Section:

Consider whether you need/want to support attribute queries at all,
esp if you know you won't support SAML1.

-peter