Incoming binding urn:oasis:names:tc:SAML:2.0:bindings:SOAP is not enabled for (SP) :::

[Peter Schober]

* Tom Scavo <trscavo at gmail.com> [2017-11-27 13:56]:
> > There's nothing stopping that now
> 
> Well then I guess I didn't understand what you meant by "we're going
> to turn off the auto-querying functionality in 3.0?" If the SP emits a
> query, it needs a signing certificate in metadata, full stop.

You can comment out the SP's Handler/@type="AttributeQuery" today.

-peter