Re: [saml-dev] supporting the AuthnRequest protocol

On 3/18/13 8:23 AM, "Philpott, Robert" <> wrote:

>It is a requirement of the conformance spec that both IDP operational
>modes
>MUST support the AuthnRequest message.  So if you want a conforming
>implementation, you have to support the message over the indicated
>bindings,
>which means you need the endpoint.  Thus IMO, it isn't a bug in the
>metadata
>spec.

Metadata is really about documenting deployments though, not
implementations. So given that, some deployments may choose not to support
one or more features, and that ought to be representable. I think it's a
mistake, but it's not a correctable one, so it's largely moot.

-- Scott