[saml-dev] Urgent: SAML NS declaration in SOAP-ENV or self contained?

Title: Urgent: SAML NS declaration in SOAP-ENV or self contained?

We ran into one problem during internet testing using the samlp and saml namespace (NS) declaration in the SAML request and response, can someone clarify it because it may cause problem at Interop.  The SAML processing routines would have problems in understanding the (2) kind of NS declaration.

There are two ways of declaring the NS:

1. declaration at the SAML level - NS is self-contained within SAML

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" >

   <SOAP-ENV:Header> ...</SOAP-ENV:Header> 

   <SOAP-ENV:Body> 

   <samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" ResponseID="id" ...> .....

   </samlp:Response>

    </SOAP-ENV:Body> 

  ...

</SOAP-ENV>

2. declaration at the SOAP level

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

   <SOAP-ENV:Header> ...</SOAP-ENV:Header> 

   <SOAP-ENV:Body> 

   <samlp:Response ResponseID="id" ...> .....

   </samlp:Response>

   </SOAP-ENV:Body> 

    ...

</SOAP-ENV>

With (1), SOAP carrier can just pass the samlp:Response to the SAML processing module.

With (2), SAML processing module has to process the whole SOAP message.

Which way (or both) should one support?