OpenSAML user discussion

["Scott Cantor" <>]

> Well, the IdP generated the artifact to begin with, so the IdP knows
> what SAMLResponse to return (i.e., the same SAMLResponse it would have
> returned via Browser/POST).  I presume that's why the <RespondWith>
> element was deprecated early on, because it adds nothing significant
> to the message exchange.

Yes, it has a long and tortured past, which is all documented in the SSTC
archives. Search there if you care, but don't use it. Whatever you think it
will buy you, you're off base.

-- Scott