Re: [saml-dev] multiple, non-indexed endpoints with the same binding

On 8/3/11 8:21 AM, "Tom Scavo" <> wrote:

>In SAML metadata, if there are TWO endpoints of type md:EndpointType
>having the same concrete type (such as SingleSignOnService) and the
>same Binding, how does a relying party choose between them?
>
>AFAICT, this is not discussed in the spec, in which case the behavior
>is unspecified, but I may be missing something, which is why I ask.

It's unspecified. Were I handling metadata, I would probably block on
overlaps that have no reasonable implementation. SOAP overlaps can be used
for client-side failover, but not front channel.

-- Scott