Shibboleth Developers

["Scott Cantor" <>]

> At the standards level, this is one SP. The implementation is an internal
> matter outside the standard. For that matter, the Redirect is more an
> implementation detail than a fully specified part of the standard.

I agree with most of your interpretation (as I said, there could be many
reasons for having multiple endpoints at the SP), but the request is
absolutely a formal protocol message. It just happens to currently be a
Shib-specific message because SAMLv1 had no such message.

In v2, a request can be made via redirect, and this is a formal protocol
binding, no different than POST or artifact.

-- Scott