Initial non-technical comments re: attribute request extension

A model for this kind of extension would be [1], which was one of the earliest extensions done post-2.0. The templates now will be quite different than the older one there, but the general outline is probably suitable, and it includes a metadata extension attribute for signaling whether one supports the extension (which in this case would be added to an IdP's <SingleSignOnService> element).



A plausible title might be "SAML V2.0 Protocol Extension for Single Sign-On Attribute Request Version 1.0"

(All specs have to be versioned now.)

-- Scott

[1] https://wiki.oasis-open.org/security/ProtocolExtThirdParty