Shibboleth Developers

["Adam Lantos" <>]

Hello,


With Shibboleth2 SP (2.0), the Extensions node of the generated
metadata is not valid.

<md:Extensions>
   <DiscoveryResponse
   xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
   Location="https://host/Shibboleth.sso/DS"; index="1"/>
</md:Extensions>

According to http://wiki.oasis-open.org/security/IdpDiscoSvcProtonProfile
 specs,

"An extension element, <idpdisc:DiscoveryResponse>, of type
md:IndexedEndpointType, is used to define the acceptable locations to
which the discovery service should respond with the user's identity
provider. The Binding attribute of the extension element MUST be set
to:
urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol."


thanks,
 Adam