> Well, an alternate approach would be to define a new RoleDescriptorType:
>
> <complexType name="HoKIDPSSODescriptorType">
> <complexContent>
> <extension base="md:IDPSSODescriptorType"/>
> </complexContent>
> </complexType>
>
> I think it's cleaner to do it this way.
I really don't. That has much more drastic implications for implementations
then using the pre-existing mechanisms for extension.
Either Nate's approach or using the Extensions element is cleaner than
inventing a new role for adding endpoints to an existing role. That really
isn't how the schema was intended to work.
-- Scott
