Incoming binding urn:oasis:names:tc:SAML:2.0:bindings:SOAP is not enabled for (SP) :::

[Peter Schober]

* Pruvost, Christian (ELS-OXF) <c.pruvost at elsevier.com> [2017-11-23 11:36]:
> I actually am reading conflicting information on that topic:
> 
> e.g. paragraph 3.10 in https://www.ukfederation.org.uk/library/uploads/Documents/federation-technical-specifications.pdf
[...]
> e.g. https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForIdP

Neither of course is the SAML specification, the latter is merely an example.

> Our IDP does not have a certificate to provide for the '
> AttributeAuthorityDescriptor' element, they only have one for the
> 'IDPSSODescriptor' element...

I doubt you'll be able to make an attrbute query if they don't publish
any keys for that role.

-peter