> For this particular case, the requirement is declared in
> SAMLProf., Section 4.1.6., Line 639:
>
> "If the request or response message is delivered using the HTTP
> Artifact binding, the artifact issuer MUST provide at least one
> <ArtifactResolutionService> endpoint element in its metadata."
>
> It's the only required use of MD I could find, btw.
It doesn't require you use metadata, it's just in the section on use of
metadata and is simply pointing out that if you do use it, you'd have to
supply such an endpoint in that case.
-- Scott