AuthnRequest question

[Cantor, Scott]

> I have a very fundamental question about how SAML Requests are
> constructed. Can someone refer me to some documentation?

Constructed by what? That's an implementation issue. I don't think you're asking how they're encoded or transmitted or what the contents mean, but that's in the standard.

> When I look at a request with Fiddler, I see the following AuthnRequest. The
> thing I really don't understand is where the elements of the request are
> coming from.

>From whatever SP implementation is creating it.

> For example, where does the NameIDPolicy Format come from?

>From somebody that doesn't understand SAML. Read it out loud:

"I request a NameID with a Format that is unspecified."

Make any sense? No. And we ignore it.

-- Scott