Shibboleth Developers

[Tom Scavo <>]

On Thu, 11 Nov 2004 15:05:42 -0500, Scott Cantor 
<>
 wrote:
> > There is only one dashed line from User Agent to Identity
> > Provider---it's the bottom half of step 3.  This request is required,
> > I think.
> 
> Nope, it's not. Processing can start with some combination of step 4-5, no
> request assumed.

I disagree.  The SAML 1.1 profiles are pretty clear about step 1,
which is a request from a user's browser.  (Obviously, a request must
precede a response.)

> > But there needs to be some way to distiniguish the two authn response
> > profiles in metadata.  Is that forthcoming?
> 
> That's already in the profile I submitted. We use the SAML profile URIs as
> the endpoint's "Binding". And we use this new URI from Shib as the Binding
> of the SingleSignOnService endpoint, since that's our non-standard profile
> for that step.

Okay, I'll wait to see this new work.

Thanks,
Tom