RE: [security-services] Rejecting Saml Requests (SOAP Binding0

> Scott, take the first item below -- so you do not even know 
> the issuer (for an http binding, you wouldn't send a saml 
> response, since you wouldn't know where to send it to -- 
> since you don't know the issuer at all).

Agreed, but you were talking SOAP faults, so I assumed you meant SOAP.

-- Scott