<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body bgcolor="#FFFFFF">
<div>Runtime validation in both is off by default. XSD schemas don't have normative names. Namespace and schema information can be found in the SAML standard.</div>
<div><br>
</div>
<div>-- Scott</div>
<div><br>
On Dec 18, 2011, at 5:17 AM, "ajay bhadauria" <<a href="mailto:abhadauria@yahoo.com">abhadauria@yahoo.com</a>> wrote:<br>
<br>
</div>
<div></div>
<blockquote type="cite">
<div>
<table cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td valign="top" style="font: inherit;">
<div>Hi,</div>
<div> </div>
<div>I have couple of questions about SAML Request/Response Assetion validation.</div>
<div> </div>
<div>1) When SP sends SAML authentication assertion to IDP, does IDP validates this assertion before authentication ? I want to know the name of schema </div>
<div> </div>
<div>2) Similarly, When IDP sends SAML response to IDP, Does SP also validates SAML response against schema ? I would like to know the name of the schema.</div>
<div> </div>
<div>Can we turn off SAML request/response validations ? </div>
<div> </div>
<div>Regards</div>
<div>Ajay </div>
</td>
</tr>
</tbody>
</table>
</div>
</blockquote>
<blockquote type="cite">
<div><span>--</span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span><br>
</div>
</blockquote>
</body>
</html>