OpenSAML user discussion

[rangeli nepal <>]

I am reading saml-binding-2.0, On page 17(line 566,567) says:

"A URL encoding MUST place the message entirely within the URL query
string, and MUST reserve the
rest of the URL for the endpoint of the message recipient."

I thought this means the protocol allows extra query string. Is this
not the intent of above statements?

I do agree we should not use the name of query parameter that
conflicts with the parameter name that protocol uses
Thank you.
rn
On Mon, Mar 21, 2011 at 1:51 PM, Cantor, Scott E. 
<>
 wrote:
> On 3/21/11 1:33 PM, "rangeli nepal" 
> <>
>  wrote:
>>I thought specification is mute about it. It just talks about
>>essential query parameters and some extent ordering. It does not talk
>>about extra query parameter.
>
> It does not allow them, because the binding itself makes use of those
> parameters. If you want to carry other information, you do it with SAML
> extensions.
>
> -- Scott
>
>