AuthnRequest question

[Doan, Tommy]

I have a very fundamental question about how SAML Requests are constructed. Can someone refer me to some documentation?

When I look at a request with Fiddler, I see the following AuthnRequest. The thing I really don't understand is where the elements of the request are coming from. For example, where does the NameIDPolicy Format come from?


<samlp:AuthnRequest ID="id-b2f5331d-cf4a-4241-a1dc-691299b47d92"
                    Version="2.0"
                    IssueInstant="2016-03-04T22:45:31.000Z"
                    Destination="https://idp.smu.edu/idp/profile/SAML2/Redirect/SSO"
                    Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified"
                    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
    <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">urn:federation:ssosbna.blacklineondemand.com</Issuer>
    <samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" AllowCreate="true" />
</samlp:AuthnRequest>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160305/208a69bb/attachment.html>