OpenSAML user discussion

["RL 'Bob' Morgan" <>]

> So in 1.1, it looks like the request sent to the IdP just contains a 
> "Target" parameter without an accompanying SAMLRequest. That's 
> unfortunate. There's a lot that the AuthnRequest allows for that is 
> apparently just not possible with SAML 1.1.

Yep.  In any scenario where the SP wants to influence the kind of 
authentication that's done by the IdP, doing this with SAML 1.1 means 
doing proprietary extensions.  On the other hand, the AuthnRequest element 
is one of the most complicated in SAML 2, and that's not even counting the 
AuthnContext stuff, which is its own 70-page document.  So just because 
you can ask for it doesn't mean the IdP knows how to give it to you.

 - RL "Bob"